last executing test programs: 43.410530595s ago: executing program 2 (id=1236): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x0, @vifc_lcl_addr=@local, @local}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0xfb, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r7, 0x891c, 0x0) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000d00)={0x60, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x3e, 0x33, @action={{{}, {}, @broadcast, @device_a, @initial, {0x0, 0xb}}, @sp_mp_close={0xf, 0x3, {{0x72, 0x6}, {0x75, 0x16, {0x1, 0x9, @void, @val=0x6, @val="7142004749285faa7af20766504aac8b"}}}}}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x60}}, 0x20000080) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f00000001c0)={0x0}) r8 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80000) setsockopt$bt_l2cap_L2CAP_OPTIONS(r8, 0x6, 0x1, &(0x7f0000000080)={0x4, 0xc09, 0xf8d, 0x40, 0x8b, 0x7f, 0xf09}, 0xc) 43.280561543s ago: executing program 2 (id=1238): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x40d, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x10, 0x20a}, [@IFLA_MTU={0x8, 0x4, 0x8001}, @IFLA_MTU={0x8, 0x4, 0x26}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x1) 43.269326458s ago: executing program 2 (id=1240): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001280)=@newtfilter={0x30, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x2}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}}, 0x0) 43.20021828s ago: executing program 2 (id=1241): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) (async, rerun: 64) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) (async, rerun: 64) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') (async) rename(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./control\x00') r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x1, 0x24, 0x1d}, 0x18) mkdirat(r0, &(0x7f0000000080)='./file2\x00', 0x0) 43.138335612s ago: executing program 2 (id=1246): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r2, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r3, 0x0, 0x10000, 0x0, 0x10000002, 0x0, 0x27f809}) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r0, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) 42.619605424s ago: executing program 2 (id=1249): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001280)=@newtfilter={0x30, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x2}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}}, 0x0) 42.542564752s ago: executing program 32 (id=1249): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001280)=@newtfilter={0x30, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x2}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}}, 0x0) 19.759116829s ago: executing program 1 (id=1792): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000060000000800000008"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="050000000c0000000080000004"], 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x9, 0xfffffffe, 0x0, 0x2}, 0x10) write(r0, &(0x7f0000000040)="240000001e005f0214fffffffffffff80700000001000000af0000000500080002000000", 0x24) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x8000, 0x9b99}, 0x9, [0x6, 0x8, 0x5, 0x7, 0x8, 0x155f, 0x6, 0x5, 0x25cc, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x9, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x2, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7fff, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0x1, 0x0, 0x2, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x10000006, 0x6], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x7, 0x5, 0x2, 0x9, 0x4, 0x5, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00000, 0x5, 0x6, 0x0, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x1cb, 0x1, 0x6ec, 0x6, 0x438, 0x2, 0x9, 0x15, 0x8000, 0x5, 0xfffffff9, 0x200004, 0x1000, 0xfffff801, 0x3], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x1, 0x6, 0x8, 0x402, 0x2, 0x400, 0x40, 0x6, 0xee4b, 0x7, 0x5, 0x0, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x7, 0x3435, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd80, 0x0, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0x56, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0xe, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x4, 0x6, 0x80000001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000005, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x1000, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x13ffd, 0x1, 0x1b18]}, 0x45c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x24, 0x40, 0x9, 0xffffffff, 0x25dfdbfd, {0x2}, [@typed={0x5, 0x11f, 0x0, 0x0, @str='\x00'}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x20}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x401, 0x0) writev(r6, &(0x7f0000000380)=[{&(0x7f0000000740)='X', 0x1}], 0x1) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x5, 0x6, 0x0, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213}) r7 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000090601020500000000000000000000000900020073797a31000000000500010007000000100007800c00018008000140fffffffe"], 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) 19.708654945s ago: executing program 1 (id=1795): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000980)={0xffffffffffffffff}) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000580), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f00000005c0)={0x11}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = creat(0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000440)={0x0}, &(0x7f0000000480)=0xc) sendmsg$nl_route(r6, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=@RTM_NEWNSID={0x24, 0x58, 0x8, 0x70bd28, 0x25dfdbff, {}, [@NETNSA_FD={0x8, 0x3, r3}, @NETNSA_PID={0x8, 0x2, r7}]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x10) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x3, 0x3010, 0x0, 0x4}, 0x0, 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040e0b0805"], 0xe) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r8, 0x4b3a, 0x1) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000002100010000000000000000000a000000000000000000000005001e"], 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5b4}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_FAST_LEAVE={0x5, 0x7, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) r9 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x181942, 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000040)=0x20) newfstatat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000002800), 0x2000) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000010000000000002fe000a5de8a39c95cc9045442ae19985e0500000000000000d5b197d3d886712d027ddf80b2f5d903ec9acf6818075de420194957ceed38a595f5de4231b7bcdabaf46e20cca7524aa15df8bc341d0f5e4d019a8bd1406575e9d454ab463c4fa89e6aa64c707ace5391e63df530785bc5fcf7241f1f452754c8341262e40e074eea3117", @ANYRES32=r1, @ANYBLOB="000000800000000000001686133100005bbb37b0804165", @ANYRES32=0x0, @ANYRES32=r9, @ANYBLOB="010000000000000000710100"/28, @ANYBLOB="c3a9b04f18b6a33a9d4f23b9ce99a10087edb553b6184de2a110548f231659972c90f629688b90c3c3d72b051c76741e85654d66d93cbe514b185e915e710e8dee55017d80f3cd43fc93e58dd331c9edb81e4d91acf63663baa84bfacd45832eb2245ace6436002c2ef9502b7f3eeba63412ed660a09a6d98de402a6c4988089a3cb673c075acc7d3dff0cd2637745e4cfdeaf46817ccbf5e8938ed1f9b5f3eb71baf9b84115d2f7b434a49a5c1fdcb2c0cbaf82992deabd805ffcd8c5156e5780440dd193253b9cc94e120f0a64bf3792ef9b160757c10b26ce59584a92abbd2bca9bf076bde5d0f3b707d1"], 0x50) getpeername$packet(r9, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000240)=0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1d, 0x101, 0x3, 0x5, 0x1082c, r10, 0x8, '\x00', r11, 0xffffffffffffffff, 0x3, 0x2, 0x2, 0x0, @void, @value, @value=r3}, 0x50) r12 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r12, 0x29, 0xb, &(0x7f0000000040)=0x4, 0x4) bind$inet6(r12, &(0x7f0000f65000)={0xa, 0x4e20, 0x97f, @loopback}, 0x1c) sendto$inet6(r12, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) getsockopt$inet6_buf(r12, 0x29, 0x6, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000080)={'team0\x00', @random="0100061f8145"}) 19.150567745s ago: executing program 1 (id=1799): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xd0}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000012c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000060a0b0400000000000000000200000018000480140001800a0001007265646972000000040002800900010073797a30000000000900020073797a3200"], 0x6c}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b80000010066b87a00c4e211aabc30d10000000f300f300fc79d53bf0000c4b9e16dc30101220f01c3", 0x6b}], 0x1, 0x14, 0x0, 0x0) r4 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x6, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r4) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="feffff06098c0927aa243b969f820328"], 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x30008000) 13.609521697s ago: executing program 1 (id=1800): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000200000006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1ad}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB='&'], 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r1, r0, 0x26}, 0x10) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f00000005c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47b07c7d], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000], [0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000]}, 0x45c) ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0x0) r3 = dup(r2) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x5) ioctl$UI_DEV_CREATE(r3, 0x5501) write$uinput_user_dev(r3, &(0x7f00000000c0)={'syz0\x00', {0xfff7, 0xc, 0x100, 0x81}, 0x1d, [0x7b, 0xb7e3, 0x3, 0x9, 0x100, 0x3, 0x1, 0x7, 0x9, 0x2, 0x7, 0xa, 0x3, 0x0, 0x7f, 0xd, 0x7fff, 0x6, 0x6, 0x5, 0x6, 0x6, 0x6, 0x6, 0xff, 0x2, 0xfffff5ee, 0x401, 0x0, 0xfc75, 0x8, 0x9, 0x4, 0x2, 0xffffffff, 0x81, 0xfffff765, 0x2, 0x7, 0xfffffff9, 0xa, 0x2, 0x5, 0x0, 0x4, 0x6, 0x7, 0x4c, 0xfffffffd, 0x80, 0x8, 0x8, 0x9, 0x7, 0x8000101, 0xc3c, 0x1733, 0x7fff, 0x7ffc, 0x0, 0x6, 0x5, 0x1, 0x4], [0x8, 0x3, 0x8, 0x8, 0x0, 0x9, 0x4, 0x0, 0x25, 0x10, 0x6, 0x7, 0x8, 0xe62, 0xffffff73, 0x1000, 0x6, 0x13e5, 0x3, 0x3, 0x1000, 0x7, 0x1, 0x3b41, 0x4, 0x1000, 0x5, 0x7fff, 0x8, 0x5a, 0xffff2503, 0x7fffffff, 0x6995, 0x1, 0x80000000, 0x8, 0xdaa, 0x5, 0x7f, 0x76c4, 0xfffffffd, 0x5, 0x10, 0x10000, 0xd, 0x2, 0x9, 0x10, 0x4000e, 0x9, 0x7, 0xa, 0x9, 0x3, 0x8000008, 0x3, 0x2, 0x3a6, 0x27f8, 0xc0d, 0xfffffffd, 0x4, 0xc, 0xfffffffb], [0xa3, 0x6, 0x6, 0x9, 0x1000, 0x0, 0x80000000, 0x5, 0x7f, 0xa, 0x100, 0x1000, 0xf1, 0x6, 0xc, 0x10000, 0x72, 0xc, 0x633, 0xd, 0x7, 0x6, 0x80000000, 0x6, 0x0, 0x7, 0x8, 0x2ef3adeb, 0x10, 0x2, 0x8, 0x8, 0x74, 0x4, 0x7, 0x7ff, 0xfffffff2, 0x63, 0x7, 0x10000, 0x3, 0x3, 0x20a7fd9e, 0xfffffffd, 0x2, 0x9d, 0x0, 0x9d, 0x7, 0xa8a, 0x2, 0x6, 0x77, 0x8, 0x1ff, 0x7, 0x7, 0x2, 0x0, 0x2, 0x8, 0x2, 0x3, 0x5], [0x4, 0x4, 0x5, 0x8000, 0x493e, 0x3, 0x35ff4447, 0x7, 0x5, 0x4, 0x7fff, 0x5, 0x5, 0x3ff, 0xb88f, 0xffff0000, 0x9, 0xf7df, 0x2, 0x10, 0x8, 0x2, 0xff, 0x6, 0x4, 0x4, 0x0, 0x0, 0x7, 0x4e6, 0x8, 0x6, 0x5ef, 0x8000, 0xc, 0x2, 0x401, 0x1, 0x5, 0x8, 0x9a8, 0x99f, 0x231, 0x3ff, 0x8, 0x1, 0xffff0001, 0x1, 0x1, 0x10, 0x8, 0x5396, 0x6161, 0x9, 0x101, 0x1ff, 0x8, 0x431, 0x6, 0x5, 0x4, 0x7b, 0x7fc, 0x9]}, 0x45c) r4 = openat$cgroup_ro(r3, &(0x7f0000000540)='net_prio.prioidx\x00', 0x100002, 0x0) write$cgroup_type(r4, &(0x7f0000000180), 0x40010) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) io_uring_setup(0x1b94, &(0x7f0000000000)) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNDEL(r5, 0x400448c9, &(0x7f0000000080)={@none, 0x1}) r6 = socket$inet_icmp(0x2, 0x2, 0x1) sendmmsg$inet(r6, &(0x7f0000000540), 0x0, 0x4044810) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000200000006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1ad}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB='&'], 0x10) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r1, r0, 0x26}, 0x10) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) (async) write$uinput_user_dev(r2, &(0x7f00000005c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47b07c7d], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000], [0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000]}, 0x45c) (async) ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0x0) (async) dup(r2) (async) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x5) (async) ioctl$UI_DEV_CREATE(r3, 0x5501) (async) write$uinput_user_dev(r3, &(0x7f00000000c0)={'syz0\x00', {0xfff7, 0xc, 0x100, 0x81}, 0x1d, [0x7b, 0xb7e3, 0x3, 0x9, 0x100, 0x3, 0x1, 0x7, 0x9, 0x2, 0x7, 0xa, 0x3, 0x0, 0x7f, 0xd, 0x7fff, 0x6, 0x6, 0x5, 0x6, 0x6, 0x6, 0x6, 0xff, 0x2, 0xfffff5ee, 0x401, 0x0, 0xfc75, 0x8, 0x9, 0x4, 0x2, 0xffffffff, 0x81, 0xfffff765, 0x2, 0x7, 0xfffffff9, 0xa, 0x2, 0x5, 0x0, 0x4, 0x6, 0x7, 0x4c, 0xfffffffd, 0x80, 0x8, 0x8, 0x9, 0x7, 0x8000101, 0xc3c, 0x1733, 0x7fff, 0x7ffc, 0x0, 0x6, 0x5, 0x1, 0x4], [0x8, 0x3, 0x8, 0x8, 0x0, 0x9, 0x4, 0x0, 0x25, 0x10, 0x6, 0x7, 0x8, 0xe62, 0xffffff73, 0x1000, 0x6, 0x13e5, 0x3, 0x3, 0x1000, 0x7, 0x1, 0x3b41, 0x4, 0x1000, 0x5, 0x7fff, 0x8, 0x5a, 0xffff2503, 0x7fffffff, 0x6995, 0x1, 0x80000000, 0x8, 0xdaa, 0x5, 0x7f, 0x76c4, 0xfffffffd, 0x5, 0x10, 0x10000, 0xd, 0x2, 0x9, 0x10, 0x4000e, 0x9, 0x7, 0xa, 0x9, 0x3, 0x8000008, 0x3, 0x2, 0x3a6, 0x27f8, 0xc0d, 0xfffffffd, 0x4, 0xc, 0xfffffffb], [0xa3, 0x6, 0x6, 0x9, 0x1000, 0x0, 0x80000000, 0x5, 0x7f, 0xa, 0x100, 0x1000, 0xf1, 0x6, 0xc, 0x10000, 0x72, 0xc, 0x633, 0xd, 0x7, 0x6, 0x80000000, 0x6, 0x0, 0x7, 0x8, 0x2ef3adeb, 0x10, 0x2, 0x8, 0x8, 0x74, 0x4, 0x7, 0x7ff, 0xfffffff2, 0x63, 0x7, 0x10000, 0x3, 0x3, 0x20a7fd9e, 0xfffffffd, 0x2, 0x9d, 0x0, 0x9d, 0x7, 0xa8a, 0x2, 0x6, 0x77, 0x8, 0x1ff, 0x7, 0x7, 0x2, 0x0, 0x2, 0x8, 0x2, 0x3, 0x5], [0x4, 0x4, 0x5, 0x8000, 0x493e, 0x3, 0x35ff4447, 0x7, 0x5, 0x4, 0x7fff, 0x5, 0x5, 0x3ff, 0xb88f, 0xffff0000, 0x9, 0xf7df, 0x2, 0x10, 0x8, 0x2, 0xff, 0x6, 0x4, 0x4, 0x0, 0x0, 0x7, 0x4e6, 0x8, 0x6, 0x5ef, 0x8000, 0xc, 0x2, 0x401, 0x1, 0x5, 0x8, 0x9a8, 0x99f, 0x231, 0x3ff, 0x8, 0x1, 0xffff0001, 0x1, 0x1, 0x10, 0x8, 0x5396, 0x6161, 0x9, 0x101, 0x1ff, 0x8, 0x431, 0x6, 0x5, 0x4, 0x7b, 0x7fc, 0x9]}, 0x45c) (async) openat$cgroup_ro(r3, &(0x7f0000000540)='net_prio.prioidx\x00', 0x100002, 0x0) (async) write$cgroup_type(r4, &(0x7f0000000180), 0x40010) (async) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) (async) io_uring_setup(0x1b94, &(0x7f0000000000)) (async) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) (async) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async) ioctl$sock_bt_hidp_HIDPCONNDEL(r5, 0x400448c9, &(0x7f0000000080)={@none, 0x1}) (async) socket$inet_icmp(0x2, 0x2, 0x1) (async) sendmmsg$inet(r6, &(0x7f0000000540), 0x0, 0x4044810) (async) 5.919133887s ago: executing program 1 (id=1800): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000200000006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1ad}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB='&'], 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r1, r0, 0x26}, 0x10) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f00000005c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47b07c7d], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000], [0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000]}, 0x45c) ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0x0) r3 = dup(r2) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x5) ioctl$UI_DEV_CREATE(r3, 0x5501) write$uinput_user_dev(r3, &(0x7f00000000c0)={'syz0\x00', {0xfff7, 0xc, 0x100, 0x81}, 0x1d, [0x7b, 0xb7e3, 0x3, 0x9, 0x100, 0x3, 0x1, 0x7, 0x9, 0x2, 0x7, 0xa, 0x3, 0x0, 0x7f, 0xd, 0x7fff, 0x6, 0x6, 0x5, 0x6, 0x6, 0x6, 0x6, 0xff, 0x2, 0xfffff5ee, 0x401, 0x0, 0xfc75, 0x8, 0x9, 0x4, 0x2, 0xffffffff, 0x81, 0xfffff765, 0x2, 0x7, 0xfffffff9, 0xa, 0x2, 0x5, 0x0, 0x4, 0x6, 0x7, 0x4c, 0xfffffffd, 0x80, 0x8, 0x8, 0x9, 0x7, 0x8000101, 0xc3c, 0x1733, 0x7fff, 0x7ffc, 0x0, 0x6, 0x5, 0x1, 0x4], [0x8, 0x3, 0x8, 0x8, 0x0, 0x9, 0x4, 0x0, 0x25, 0x10, 0x6, 0x7, 0x8, 0xe62, 0xffffff73, 0x1000, 0x6, 0x13e5, 0x3, 0x3, 0x1000, 0x7, 0x1, 0x3b41, 0x4, 0x1000, 0x5, 0x7fff, 0x8, 0x5a, 0xffff2503, 0x7fffffff, 0x6995, 0x1, 0x80000000, 0x8, 0xdaa, 0x5, 0x7f, 0x76c4, 0xfffffffd, 0x5, 0x10, 0x10000, 0xd, 0x2, 0x9, 0x10, 0x4000e, 0x9, 0x7, 0xa, 0x9, 0x3, 0x8000008, 0x3, 0x2, 0x3a6, 0x27f8, 0xc0d, 0xfffffffd, 0x4, 0xc, 0xfffffffb], [0xa3, 0x6, 0x6, 0x9, 0x1000, 0x0, 0x80000000, 0x5, 0x7f, 0xa, 0x100, 0x1000, 0xf1, 0x6, 0xc, 0x10000, 0x72, 0xc, 0x633, 0xd, 0x7, 0x6, 0x80000000, 0x6, 0x0, 0x7, 0x8, 0x2ef3adeb, 0x10, 0x2, 0x8, 0x8, 0x74, 0x4, 0x7, 0x7ff, 0xfffffff2, 0x63, 0x7, 0x10000, 0x3, 0x3, 0x20a7fd9e, 0xfffffffd, 0x2, 0x9d, 0x0, 0x9d, 0x7, 0xa8a, 0x2, 0x6, 0x77, 0x8, 0x1ff, 0x7, 0x7, 0x2, 0x0, 0x2, 0x8, 0x2, 0x3, 0x5], [0x4, 0x4, 0x5, 0x8000, 0x493e, 0x3, 0x35ff4447, 0x7, 0x5, 0x4, 0x7fff, 0x5, 0x5, 0x3ff, 0xb88f, 0xffff0000, 0x9, 0xf7df, 0x2, 0x10, 0x8, 0x2, 0xff, 0x6, 0x4, 0x4, 0x0, 0x0, 0x7, 0x4e6, 0x8, 0x6, 0x5ef, 0x8000, 0xc, 0x2, 0x401, 0x1, 0x5, 0x8, 0x9a8, 0x99f, 0x231, 0x3ff, 0x8, 0x1, 0xffff0001, 0x1, 0x1, 0x10, 0x8, 0x5396, 0x6161, 0x9, 0x101, 0x1ff, 0x8, 0x431, 0x6, 0x5, 0x4, 0x7b, 0x7fc, 0x9]}, 0x45c) r4 = openat$cgroup_ro(r3, &(0x7f0000000540)='net_prio.prioidx\x00', 0x100002, 0x0) write$cgroup_type(r4, &(0x7f0000000180), 0x40010) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) io_uring_setup(0x1b94, &(0x7f0000000000)) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNDEL(r5, 0x400448c9, &(0x7f0000000080)={@none, 0x1}) r6 = socket$inet_icmp(0x2, 0x2, 0x1) sendmmsg$inet(r6, &(0x7f0000000540), 0x0, 0x4044810) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000200000006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1ad}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB='&'], 0x10) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r1, r0, 0x26}, 0x10) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) (async) write$uinput_user_dev(r2, &(0x7f00000005c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47b07c7d], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000], [0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000]}, 0x45c) (async) ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0x0) (async) dup(r2) (async) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x5) (async) ioctl$UI_DEV_CREATE(r3, 0x5501) (async) write$uinput_user_dev(r3, &(0x7f00000000c0)={'syz0\x00', {0xfff7, 0xc, 0x100, 0x81}, 0x1d, [0x7b, 0xb7e3, 0x3, 0x9, 0x100, 0x3, 0x1, 0x7, 0x9, 0x2, 0x7, 0xa, 0x3, 0x0, 0x7f, 0xd, 0x7fff, 0x6, 0x6, 0x5, 0x6, 0x6, 0x6, 0x6, 0xff, 0x2, 0xfffff5ee, 0x401, 0x0, 0xfc75, 0x8, 0x9, 0x4, 0x2, 0xffffffff, 0x81, 0xfffff765, 0x2, 0x7, 0xfffffff9, 0xa, 0x2, 0x5, 0x0, 0x4, 0x6, 0x7, 0x4c, 0xfffffffd, 0x80, 0x8, 0x8, 0x9, 0x7, 0x8000101, 0xc3c, 0x1733, 0x7fff, 0x7ffc, 0x0, 0x6, 0x5, 0x1, 0x4], [0x8, 0x3, 0x8, 0x8, 0x0, 0x9, 0x4, 0x0, 0x25, 0x10, 0x6, 0x7, 0x8, 0xe62, 0xffffff73, 0x1000, 0x6, 0x13e5, 0x3, 0x3, 0x1000, 0x7, 0x1, 0x3b41, 0x4, 0x1000, 0x5, 0x7fff, 0x8, 0x5a, 0xffff2503, 0x7fffffff, 0x6995, 0x1, 0x80000000, 0x8, 0xdaa, 0x5, 0x7f, 0x76c4, 0xfffffffd, 0x5, 0x10, 0x10000, 0xd, 0x2, 0x9, 0x10, 0x4000e, 0x9, 0x7, 0xa, 0x9, 0x3, 0x8000008, 0x3, 0x2, 0x3a6, 0x27f8, 0xc0d, 0xfffffffd, 0x4, 0xc, 0xfffffffb], [0xa3, 0x6, 0x6, 0x9, 0x1000, 0x0, 0x80000000, 0x5, 0x7f, 0xa, 0x100, 0x1000, 0xf1, 0x6, 0xc, 0x10000, 0x72, 0xc, 0x633, 0xd, 0x7, 0x6, 0x80000000, 0x6, 0x0, 0x7, 0x8, 0x2ef3adeb, 0x10, 0x2, 0x8, 0x8, 0x74, 0x4, 0x7, 0x7ff, 0xfffffff2, 0x63, 0x7, 0x10000, 0x3, 0x3, 0x20a7fd9e, 0xfffffffd, 0x2, 0x9d, 0x0, 0x9d, 0x7, 0xa8a, 0x2, 0x6, 0x77, 0x8, 0x1ff, 0x7, 0x7, 0x2, 0x0, 0x2, 0x8, 0x2, 0x3, 0x5], [0x4, 0x4, 0x5, 0x8000, 0x493e, 0x3, 0x35ff4447, 0x7, 0x5, 0x4, 0x7fff, 0x5, 0x5, 0x3ff, 0xb88f, 0xffff0000, 0x9, 0xf7df, 0x2, 0x10, 0x8, 0x2, 0xff, 0x6, 0x4, 0x4, 0x0, 0x0, 0x7, 0x4e6, 0x8, 0x6, 0x5ef, 0x8000, 0xc, 0x2, 0x401, 0x1, 0x5, 0x8, 0x9a8, 0x99f, 0x231, 0x3ff, 0x8, 0x1, 0xffff0001, 0x1, 0x1, 0x10, 0x8, 0x5396, 0x6161, 0x9, 0x101, 0x1ff, 0x8, 0x431, 0x6, 0x5, 0x4, 0x7b, 0x7fc, 0x9]}, 0x45c) (async) openat$cgroup_ro(r3, &(0x7f0000000540)='net_prio.prioidx\x00', 0x100002, 0x0) (async) write$cgroup_type(r4, &(0x7f0000000180), 0x40010) (async) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) (async) io_uring_setup(0x1b94, &(0x7f0000000000)) (async) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) (async) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async) ioctl$sock_bt_hidp_HIDPCONNDEL(r5, 0x400448c9, &(0x7f0000000080)={@none, 0x1}) (async) socket$inet_icmp(0x2, 0x2, 0x1) (async) sendmmsg$inet(r6, &(0x7f0000000540), 0x0, 0x4044810) (async) 4.180609762s ago: executing program 0 (id=2042): memfd_create(&(0x7f0000000000)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fanotify_init(0x200, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r0, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x4}}, 0x20) capget(&(0x7f0000000100)={0x20071026}, &(0x7f0000000240)={0x3, 0x667, 0xbda, 0x4, 0x0, 0x5}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x2, @empty, 0xa098}, {0xa, 0x4e21, 0x8000009, @mcast1}, r2, 0x4040099d}}, 0x48) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 4.179814413s ago: executing program 0 (id=2044): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}}, 0x0) syz_emit_ethernet(0x100, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x0) 4.179645274s ago: executing program 0 (id=2045): mount(&(0x7f0000000040)=@sr0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='ext3\x00', 0x0, 0x0) 4.030043694s ago: executing program 0 (id=2048): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000940)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000005c0)={0x14, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) read$char_usb(r1, &(0x7f0000000000)=""/172, 0xac) write$binfmt_script(0xffffffffffffffff, &(0x7f00000003c0), 0x4) 1.21704804s ago: executing program 4 (id=2091): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet(0x2, 0x2, 0x1) bind$inet(r1, &(0x7f0000000000)={0x2, 0x6ea6, @local}, 0x10) getsockopt$inet_int(r1, 0x0, 0xe, &(0x7f00000026c0), &(0x7f0000002700)=0x4) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000000380)=0x2, 0x4) setpgid(0x0, 0x0) r2 = socket(0x10, 0x80002, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='romfs\x00', 0x200000, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x8000) recvmmsg$unix(r2, &(0x7f0000002380)=[{{0x0, 0x4000000, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0xecc}], 0x1}}], 0x8, 0x0, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, &(0x7f00000000c0)={0x1, 0x1, 0x3}) read$FUSE(r3, &(0x7f00000003c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r3, &(0x7f0000006b80)={0x490, 0x0, r4, [{{0x4, 0x0, 0x3, 0xffffffffffffffff, 0x101, 0x10, {0x4, 0xf9, 0x1000, 0x100, 0x8000000000000001, 0xff, 0xfffffff7, 0xb, 0xffff4680, 0xa000, 0x9, 0x0, 0x0, 0x7, 0x9}}, {0x0, 0x2, 0x2, 0x200, '%['}}, {{0x3, 0x0, 0x6, 0xd, 0x37b405fc, 0x52a, {0x1, 0x2, 0x400, 0x3, 0x7, 0x3a3, 0x171, 0x400, 0x200, 0x6000, 0xc44, 0x0, 0x0, 0xff, 0x7fff}}, {0x3, 0x7, 0x7, 0xf, '%!@//-('}}, {{0x1, 0x0, 0x6c9, 0xe5b, 0x8, 0xe997, {0x2, 0x7, 0x0, 0x0, 0x0, 0x8, 0x3165, 0x7ca, 0x2, 0xc000, 0x401, 0x0, 0x0, 0xa8, 0xfffffff9}}, {0x6, 0x5, 0xa, 0x7, '/dev/cuse\x00'}}, {{0x5, 0x3, 0xf, 0x9, 0x5, 0x1, {0x4, 0x2, 0x9, 0x1fe, 0x6, 0x7, 0x2, 0x3, 0xffffff81, 0x4000, 0xff, 0x0, 0x0, 0x6, 0xffffffff}}, {0x2, 0x1, 0x6, 0x0, ',.$}*:'}}, {{0x4, 0x0, 0x8, 0x5, 0xb540, 0x7, {0x1, 0x5, 0x7, 0x689, 0x1, 0x0, 0x8001, 0x2, 0x7, 0x6000, 0x7, 0x0, 0x0, 0xcee9, 0x1ff}}, {0x3, 0x8, 0xa, 0x4, '/dev/cuse\x00'}}, {{0x5, 0x2, 0x7ff, 0x1, 0xc7db, 0x2, {0x3, 0xc, 0x1, 0xfffffffffffffffa, 0x8000000000000000, 0x4, 0xf5, 0x6, 0x7c3, 0x1000, 0x3ff, 0x0, 0x0, 0x0, 0xffffffff}}, {0x6, 0x0, 0xa, 0x0, '/dev/cuse\x00'}}, {{0x4, 0x3, 0x9, 0x6, 0x8, 0x10000, {0x3, 0x1, 0x40, 0x0, 0xe, 0x5, 0x7, 0x7f, 0x2, 0x6000, 0x5, 0x0, 0xee00, 0xffffffff, 0x5}}, {0x4, 0x4, 0xa, 0x80000001, '/dev/cuse\x00'}}]}, 0x490) r5 = openat$hpet(0xffffffffffffff9c, &(0x7f0000002640), 0x0, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r5, 0x5385, &(0x7f0000002680)={0x18, ""/24}) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) sendmsg(r0, &(0x7f0000000280)={&(0x7f0000000200)=@pppoe={0x18, 0x0, {0x4, @random="3f988282a050", 'vlan0\x00'}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000100)="5bab2acba79f1a7540accdf08e26b4a2f0dc2b21bcd6e07ad5598113494b4004042332ff417ca76be57b", 0x2a}, {&(0x7f0000002400)="334145aba9cc9343a1ab6b7d2b4ab4b5c78562dbbc184f43fe0566bbf8bbf762f822b4b4d95721e5450d96ad7ca092235c0464c499a4a4bf6ff0c7f4a46dd8ea6b509bc9fa162eebabad3f46c55665d91699a144fa4474f0f3f54f438965a2ab841c70bdb99ea6cfaaf58fb4947832a589", 0x71}, {&(0x7f0000002480)="a8f36bf407673c6c4a1993a0675e3948e95b1430346ee2e58e7d7327e59255391e7ec73278254dbf75a50e7605cd64bda8c38e3a10183f3dbe4488ae85bdef5c27249aa8c7708ebfdbe110cf224e1cfcdd4b8505fe8bc0c1f79d89787923bf9de6f2a704fda7a60201ad50ede1c45437a58b7ec79c212f936b48f98f4b3fa6bb7636027160c371d43f9662ed79163a54de629d12f67a0486153f048d816682b21a173def20a504ab271e16a6964f395be84adac4cc490169b9e0ab75c3bc997ec107c7c44c1f7f8904a8737e12765473e478fc2b138b6ac77d648b79bc1e94c9592de9", 0xe3}], 0x3, &(0x7f0000002580)=[{0x88, 0x10c, 0xfffffff6, "63fbd1d848bac2f97ba98abd134460ecc3a7668b8322a63d09e92d48d8270f917b27b40627fd773c814cc8366b2c71eb81068c647cb63d07ba386295c5c953b3d9a986a33c8614918cfb2e163e69698ded4dff1266574c8c372bf44cedfed47f5fd0b6fb1d9ea62bd34f4d7c6a5835387683eaf4b53372a9"}], 0x88}, 0x4000000) 1.160245581s ago: executing program 4 (id=2092): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) request_key(0x0, &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='y\xa9n::e\x00'/18, 0xfffffffffffffffe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) gettid() timer_create(0x2, 0x0, &(0x7f00000003c0)=0x0) timer_gettime(r1, &(0x7f0000000480)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0xa4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2c2a1f44}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xa4}}, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r7) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='GPL\x00'}, 0x94) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00'}) socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r11) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r12, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) 1.020491212s ago: executing program 4 (id=2093): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x202, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000063e000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f00000000c0)="f086955aedb808010f00d00f300f011a66b9c00b000066b80900000066ba000000000f300f745ee8670f01cadf3c660f1b030f219d", 0x35}], 0x1, 0x10, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000000)="f00fc7484d36f08266060266b9800000c00f326635000400000f308bc1de780066b9aa0200000f3266b9ab0900000f32f2f031b3e759dc2c", 0x38}], 0x1, 0x9f6a364b3fac2a63, 0x0, 0x0) r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000140)={0x0, &(0x7f0000000240)=[@uexit={0x0, 0x18, 0x4}, @uexit={0x0, 0x18, 0x401}, @wr_drn={0x6e, 0x20, {0x2, 0xfffffffffffffd1e}}, @cpuid={0x14, 0x18, {0x0, 0x1}}, @wrmsr={0x1e, 0x20, {0xc00101d0, 0x2f6e}}, @set_irq_handler={0xbe, 0x20, {0x13, 0x1}}, @cpuid={0x14, 0x18, {0xf6af, 0x7}}, @out_dx={0xaa, 0x28, {0xc6c4, 0x4, 0x8}}, @in_dx={0x82, 0x20, {0x682c, 0x2}}, @cpuid={0x14, 0x18, {0x3ff, 0x2}}, @in_dx={0x82, 0x20, {0xafa7}}, @cpuid={0x14, 0x18, {0x16, 0x4c03}}], 0x158}) ioctl$KVM_CAP_HYPERV_SYNIC(r3, 0x4068aea3, &(0x7f0000000180)) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.020263521s ago: executing program 0 (id=2094): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$F2FS_IOC_COMPRESS_FILE(r0, 0xf518, 0x0) (async) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x4e21, 0x3, 'nq\x00', 0x1, 0x4, 0x8}, 0x2c) (async) r4 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$igmp6(0xa, 0x3, 0x2) r7 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r8 = accept4$alg(r0, 0x0, 0x0, 0x80800) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000440)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x5}}, 0x80, r9}) (async) r10 = syz_open_dev$usbfs(&(0x7f0000000040), 0x7e39, 0x101341) ioctl$USBDEVFS_ALLOW_SUSPEND(r10, 0x5522) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8936, &(0x7f0000000140)={@loopback, 0x80, r9}) (async) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x24048011}, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(r5, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) (async) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_service_bytes\x00', 0x26e1, 0x0) r12 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r12, 0x1, 0x3e, &(0x7f00000002c0)=r11, 0x161) sendmsg$NL80211_CMD_SET_KEY(r11, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x32c8823e14037a23}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000032c667336528bdb5d5442902702", @ANYRES16=r1, @ANYBLOB="080025bd7000fbdbdf250a0000000c00990008000000320000000400280004000b00"], 0x28}, 0x1, 0x0, 0x0, 0x880}, 0x480c8) (async) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYRESOCT=r2, @ANYRES16=r1, @ANYBLOB="0000000000030f3a1edaeeaef8b0a2b44960c739d5398e1f11ed086d1199c25a95a0dd8f8d"], 0x14}}, 0x84) 966.927211ms ago: executing program 0 (id=2096): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ppoll(&(0x7f0000000080)=[{r1, 0x6004}], 0x1, &(0x7f00000000c0), &(0x7f0000000100)={[0x8]}, 0x8) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) 910.185977ms ago: executing program 4 (id=2097): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x100000e, 0x5d032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f0000000040)={0x9}) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000240)={0x1, @pix_mp={0x100, 0x0, 0xa0363159, 0x0, 0x0, [{0x3, 0x81}, {0xfffffffb, 0x5}, {0x8e5d, 0x4e670b6f}, {0x8, 0x3}, {0xd, 0xffffffff}, {0x7, 0xc000}, {0x60000000, 0x4}, {0x5ba, 0x10}], 0x10, 0xb, 0x1, 0x2, 0x6}}) (async) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000240)={0x1, @pix_mp={0x100, 0x0, 0xa0363159, 0x0, 0x0, [{0x3, 0x81}, {0xfffffffb, 0x5}, {0x8e5d, 0x4e670b6f}, {0x8, 0x3}, {0xd, 0xffffffff}, {0x7, 0xc000}, {0x60000000, 0x4}, {0x5ba, 0x10}], 0x10, 0xb, 0x1, 0x2, 0x6}}) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="5200000002"], 0x8) (async) write$bt_hci(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="5200000002"], 0x8) r4 = syz_open_dev$video(&(0x7f0000000000), 0xd, 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000002c0)={0xa, @pix={0x2, 0x0, 0x30314247, 0x0, 0x0, 0x0, 0x6, 0x1, 0x3, 0x0, 0x0, 0x1}}) (async) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000002c0)={0xa, @pix={0x2, 0x0, 0x30314247, 0x0, 0x0, 0x0, 0x6, 0x1, 0x3, 0x0, 0x0, 0x1}}) rt_sigprocmask(0x2, &(0x7f0000000400)={[0x78e437d9]}, 0x0, 0x8) gettid() (async) r5 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r5) tkill(r5, 0xb) (async) tkill(r5, 0xb) io_pgetevents(0x0, 0x7, 0x0, 0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={[0x2368e8fe]}, 0x8}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000611214000000000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000582000/0x2000)=nil, 0x800000}) 817.217062ms ago: executing program 4 (id=2098): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x2, {{0x1, 0x1}, 0x80000000}}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) (async, rerun: 64) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (rerun: 64) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000480)=0x7fffffff, 0x4) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r4, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) (async, rerun: 32) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000340)) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000018110000", @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) modify_ldt$write(0x1, &(0x7f00000003c0)={0x23, 0x1800, 0x400}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x41000, 0x3d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1f075, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) (async) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$setregs(0xd, r6, 0x0, &(0x7f00000003c0)) (async) ptrace$getregset(0x4205, r6, 0x1, &(0x7f0000000080)={&(0x7f00000000c0)=""/120, 0x78}) (async, rerun: 32) r7 = dup(r5) (rerun: 32) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000000)={0x1, r7}) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f00000003c0)={0x1, r5}) (async) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)=0x0) r9 = syz_open_procfs(r8, &(0x7f0000000080)='net/dev\x00') r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x30, 0x1411, 0x1, 0x70bd25, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x240440c5}, 0x8054) (async, rerun: 32) read$alg(r9, &(0x7f00000001c0)=""/90, 0x7e) (rerun: 32) 769.830742ms ago: executing program 4 (id=2100): r0 = open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x36) bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) r1 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000100), &(0x7f0000000280)) io_uring_enter(r1, 0x54, 0x4, 0xf, 0x0, 0x18) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000041c0)={0x2020, 0x0, 0x0}, 0xfffffffffffffed9) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0xd22, 0x8000a28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) creat(&(0x7f00000001c0)='./file0\x00', 0x0) 267.717809ms ago: executing program 3 (id=2111): syz_open_dev$loop(&(0x7f0000000280), 0x5, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000bc0)=[{0x22, 0x0, [0x5, 0xb, 0x9, 0x2, 0xfffffffd, 0x1, 0x3ff, 0x0, 0x0, 0x400, 0x9, 0x5, 0x0, 0x5, 0xfffffff8]}, {0x3, 0x0, [0x1bb, 0x3, 0xf1d, 0x10001, 0x7, 0x7fff, 0xf833, 0x7, 0x2094, 0x1f53, 0x0, 0x7, 0x7, 0x1, 0x200, 0x5]}, {0x0, 0x0, [0x6, 0x6, 0x10000, 0x3, 0x9a, 0x6, 0x681, 0x0, 0x49, 0x6, 0x9, 0xa, 0x4, 0x4, 0x27, 0x6]}, {0x25, 0x0, [0x5458, 0x5, 0x80000000, 0x10001, 0x1000, 0x4, 0x1, 0x44, 0x800, 0xb46a, 0x10000, 0xe4, 0x80000000, 0xfffffffa, 0x1, 0xffffff00]}], 0xffffffffffffffff, 0x1, 0x1, 0x120}}, 0x20) mount$fuse(0x0, 0x0, 0x0, 0x1, &(0x7f0000000ac0)=ANY=[@ANYBLOB="e7e4861f4bcfc6ea1143faf5be5b5e6bb7fabe3baafc310136a16290571ae8331b4e694ced800eb58807a40c5e77fb570e73ce84643ade9bd61334c3db831aa9838138efc968d22a37602fe9fbd34248422a878423c342d2dacc0f31a82f8b8dd66eb41a31a685e98b308061b43aa0a114ee48904e4a283fed6662fb8bbd784924805e94080330dd54bc", @ANYBLOB=',rootmode=', @ANYBLOB=',']) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be7d6a14", 0x9) write$binfmt_misc(r2, &(0x7f0000000600)="90ca23e09107b73a9fad08d98a814b26c98d380dbd307ed218e19e7fa45df735e5f7d8889b2a4e6ebe4f3686f1e07b2a3facf4246f99c8473dc7b676227328c966e3061eb21742e87c2eab0496b233c2538a191f5ea6b9f2729c22f749c82324b6362d245a9a19e0a6f45ce7efbbe40c8917fed63f222a811734d11767d922ab278f3078bb14ab94a4b4003167a3373ab734bad8c523a2ce8127ce6f968be7303e42af361836ee8ef973e41a57370ef0bc0fceaef85e3ce93eac0e4a75d5357d9933caef20eb1b67f81fb1e6", 0xcc) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r6, 0x107, 0x17, 0x0, &(0x7f0000000200)) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x34, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a6803e10951cd4b347113e55eb289519becf7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f700"}, 0xd8) close_range(r7, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) close_range(r0, r2, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 249.057959ms ago: executing program 1 (id=1800): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000200000006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1ad}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB='&'], 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r1, r0, 0x26}, 0x10) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f00000005c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47b07c7d], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000], [0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000]}, 0x45c) ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0x0) r3 = dup(r2) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x5) ioctl$UI_DEV_CREATE(r3, 0x5501) write$uinput_user_dev(r3, &(0x7f00000000c0)={'syz0\x00', {0xfff7, 0xc, 0x100, 0x81}, 0x1d, [0x7b, 0xb7e3, 0x3, 0x9, 0x100, 0x3, 0x1, 0x7, 0x9, 0x2, 0x7, 0xa, 0x3, 0x0, 0x7f, 0xd, 0x7fff, 0x6, 0x6, 0x5, 0x6, 0x6, 0x6, 0x6, 0xff, 0x2, 0xfffff5ee, 0x401, 0x0, 0xfc75, 0x8, 0x9, 0x4, 0x2, 0xffffffff, 0x81, 0xfffff765, 0x2, 0x7, 0xfffffff9, 0xa, 0x2, 0x5, 0x0, 0x4, 0x6, 0x7, 0x4c, 0xfffffffd, 0x80, 0x8, 0x8, 0x9, 0x7, 0x8000101, 0xc3c, 0x1733, 0x7fff, 0x7ffc, 0x0, 0x6, 0x5, 0x1, 0x4], [0x8, 0x3, 0x8, 0x8, 0x0, 0x9, 0x4, 0x0, 0x25, 0x10, 0x6, 0x7, 0x8, 0xe62, 0xffffff73, 0x1000, 0x6, 0x13e5, 0x3, 0x3, 0x1000, 0x7, 0x1, 0x3b41, 0x4, 0x1000, 0x5, 0x7fff, 0x8, 0x5a, 0xffff2503, 0x7fffffff, 0x6995, 0x1, 0x80000000, 0x8, 0xdaa, 0x5, 0x7f, 0x76c4, 0xfffffffd, 0x5, 0x10, 0x10000, 0xd, 0x2, 0x9, 0x10, 0x4000e, 0x9, 0x7, 0xa, 0x9, 0x3, 0x8000008, 0x3, 0x2, 0x3a6, 0x27f8, 0xc0d, 0xfffffffd, 0x4, 0xc, 0xfffffffb], [0xa3, 0x6, 0x6, 0x9, 0x1000, 0x0, 0x80000000, 0x5, 0x7f, 0xa, 0x100, 0x1000, 0xf1, 0x6, 0xc, 0x10000, 0x72, 0xc, 0x633, 0xd, 0x7, 0x6, 0x80000000, 0x6, 0x0, 0x7, 0x8, 0x2ef3adeb, 0x10, 0x2, 0x8, 0x8, 0x74, 0x4, 0x7, 0x7ff, 0xfffffff2, 0x63, 0x7, 0x10000, 0x3, 0x3, 0x20a7fd9e, 0xfffffffd, 0x2, 0x9d, 0x0, 0x9d, 0x7, 0xa8a, 0x2, 0x6, 0x77, 0x8, 0x1ff, 0x7, 0x7, 0x2, 0x0, 0x2, 0x8, 0x2, 0x3, 0x5], [0x4, 0x4, 0x5, 0x8000, 0x493e, 0x3, 0x35ff4447, 0x7, 0x5, 0x4, 0x7fff, 0x5, 0x5, 0x3ff, 0xb88f, 0xffff0000, 0x9, 0xf7df, 0x2, 0x10, 0x8, 0x2, 0xff, 0x6, 0x4, 0x4, 0x0, 0x0, 0x7, 0x4e6, 0x8, 0x6, 0x5ef, 0x8000, 0xc, 0x2, 0x401, 0x1, 0x5, 0x8, 0x9a8, 0x99f, 0x231, 0x3ff, 0x8, 0x1, 0xffff0001, 0x1, 0x1, 0x10, 0x8, 0x5396, 0x6161, 0x9, 0x101, 0x1ff, 0x8, 0x431, 0x6, 0x5, 0x4, 0x7b, 0x7fc, 0x9]}, 0x45c) r4 = openat$cgroup_ro(r3, &(0x7f0000000540)='net_prio.prioidx\x00', 0x100002, 0x0) write$cgroup_type(r4, &(0x7f0000000180), 0x40010) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) io_uring_setup(0x1b94, &(0x7f0000000000)) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNDEL(r5, 0x400448c9, &(0x7f0000000080)={@none, 0x1}) r6 = socket$inet_icmp(0x2, 0x2, 0x1) sendmmsg$inet(r6, &(0x7f0000000540), 0x0, 0x4044810) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000200000006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1ad}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB='&'], 0x10) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r1, r0, 0x26}, 0x10) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) (async) write$uinput_user_dev(r2, &(0x7f00000005c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47b07c7d], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000], [0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000]}, 0x45c) (async) ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0x0) (async) dup(r2) (async) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x5) (async) ioctl$UI_DEV_CREATE(r3, 0x5501) (async) write$uinput_user_dev(r3, &(0x7f00000000c0)={'syz0\x00', {0xfff7, 0xc, 0x100, 0x81}, 0x1d, [0x7b, 0xb7e3, 0x3, 0x9, 0x100, 0x3, 0x1, 0x7, 0x9, 0x2, 0x7, 0xa, 0x3, 0x0, 0x7f, 0xd, 0x7fff, 0x6, 0x6, 0x5, 0x6, 0x6, 0x6, 0x6, 0xff, 0x2, 0xfffff5ee, 0x401, 0x0, 0xfc75, 0x8, 0x9, 0x4, 0x2, 0xffffffff, 0x81, 0xfffff765, 0x2, 0x7, 0xfffffff9, 0xa, 0x2, 0x5, 0x0, 0x4, 0x6, 0x7, 0x4c, 0xfffffffd, 0x80, 0x8, 0x8, 0x9, 0x7, 0x8000101, 0xc3c, 0x1733, 0x7fff, 0x7ffc, 0x0, 0x6, 0x5, 0x1, 0x4], [0x8, 0x3, 0x8, 0x8, 0x0, 0x9, 0x4, 0x0, 0x25, 0x10, 0x6, 0x7, 0x8, 0xe62, 0xffffff73, 0x1000, 0x6, 0x13e5, 0x3, 0x3, 0x1000, 0x7, 0x1, 0x3b41, 0x4, 0x1000, 0x5, 0x7fff, 0x8, 0x5a, 0xffff2503, 0x7fffffff, 0x6995, 0x1, 0x80000000, 0x8, 0xdaa, 0x5, 0x7f, 0x76c4, 0xfffffffd, 0x5, 0x10, 0x10000, 0xd, 0x2, 0x9, 0x10, 0x4000e, 0x9, 0x7, 0xa, 0x9, 0x3, 0x8000008, 0x3, 0x2, 0x3a6, 0x27f8, 0xc0d, 0xfffffffd, 0x4, 0xc, 0xfffffffb], [0xa3, 0x6, 0x6, 0x9, 0x1000, 0x0, 0x80000000, 0x5, 0x7f, 0xa, 0x100, 0x1000, 0xf1, 0x6, 0xc, 0x10000, 0x72, 0xc, 0x633, 0xd, 0x7, 0x6, 0x80000000, 0x6, 0x0, 0x7, 0x8, 0x2ef3adeb, 0x10, 0x2, 0x8, 0x8, 0x74, 0x4, 0x7, 0x7ff, 0xfffffff2, 0x63, 0x7, 0x10000, 0x3, 0x3, 0x20a7fd9e, 0xfffffffd, 0x2, 0x9d, 0x0, 0x9d, 0x7, 0xa8a, 0x2, 0x6, 0x77, 0x8, 0x1ff, 0x7, 0x7, 0x2, 0x0, 0x2, 0x8, 0x2, 0x3, 0x5], [0x4, 0x4, 0x5, 0x8000, 0x493e, 0x3, 0x35ff4447, 0x7, 0x5, 0x4, 0x7fff, 0x5, 0x5, 0x3ff, 0xb88f, 0xffff0000, 0x9, 0xf7df, 0x2, 0x10, 0x8, 0x2, 0xff, 0x6, 0x4, 0x4, 0x0, 0x0, 0x7, 0x4e6, 0x8, 0x6, 0x5ef, 0x8000, 0xc, 0x2, 0x401, 0x1, 0x5, 0x8, 0x9a8, 0x99f, 0x231, 0x3ff, 0x8, 0x1, 0xffff0001, 0x1, 0x1, 0x10, 0x8, 0x5396, 0x6161, 0x9, 0x101, 0x1ff, 0x8, 0x431, 0x6, 0x5, 0x4, 0x7b, 0x7fc, 0x9]}, 0x45c) (async) openat$cgroup_ro(r3, &(0x7f0000000540)='net_prio.prioidx\x00', 0x100002, 0x0) (async) write$cgroup_type(r4, &(0x7f0000000180), 0x40010) (async) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) (async) io_uring_setup(0x1b94, &(0x7f0000000000)) (async) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) (async) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async) ioctl$sock_bt_hidp_HIDPCONNDEL(r5, 0x400448c9, &(0x7f0000000080)={@none, 0x1}) (async) socket$inet_icmp(0x2, 0x2, 0x1) (async) sendmmsg$inet(r6, &(0x7f0000000540), 0x0, 0x4044810) (async) 166.950726ms ago: executing program 3 (id=2112): r0 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000080)={0x1, 0x0, 0x40000006, 0x0}) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0xffffffffffffffff, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) 89.472006ms ago: executing program 3 (id=2113): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x5, 0x29c2e5a4c548c402, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000810502000000faffdf2500000000", @ANYRES32=0x0, @ANYBLOB="f7d40400000000001c00128009000100626f6e64000000000c0002800800070007000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4042}, 0x0) 87.264675ms ago: executing program 3 (id=2114): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000002180)={0x0}, 0x1, 0x0, 0x0, 0x84850}, 0x20040040) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000000906010200000003000000090002007379"], 0x28}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="02000000040000000800000001000000800000005361c8905b030cfd892f315337cd971cae68deea2aad4e7f36fc15ed4bac13014d3419562b7639d8a5e32dd291", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x96) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, 0xffffffffffffffff}, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a007e0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000200000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000002080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000040)={@hyper}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) socket$igmp6(0xa, 0x3, 0x2) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 445.44µs ago: executing program 3 (id=2115): r0 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) capset(0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='test_dummy_encryption', &(0x7f0000000180)='auto_da_alloc', 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$CDROMVOLCTRL(r1, 0x31f, &(0x7f0000000000)={0x23, 0xd, 0x7, 0x9}) 0s ago: executing program 3 (id=2116): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000000080)={0x81, 0x0, 0x3}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0xe, 0xf1, 0x5, 0xfd, 0xd4, 0xd4, 0x0, 0xd7, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0x8080000, 0xdddd1000, 0xb, 0x1, 0x2, 0x0, 0x4, 0x1, 0x81, 0x0, 0xc4, 0x5}, {0x8000000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x1, 0x3, 0x9, 0xd, 0x6, 0x5, 0x4, 0x2e, 0x4b}, {0x6000, 0x0, 0xb, 0x0, 0x3, 0x1, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x6000, 0x4000, 0xf, 0xff, 0x3, 0xff, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x1, 0xff, 0x7}, {0xeeef0000, 0x5}, {0x4, 0x9}, 0x40010000, 0x0, 0xffff1000, 0x300, 0x5, 0x2000, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x10, 0x2, 0x9, 0x0, 0xffffffffffffffff, 0x10000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x9d}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x9}, 0x94) clock_nanosleep(0x8, 0x0, &(0x7f0000000000)={0x0, 0x989680}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000000340)={0x1c, r5, 0x1, 0x70bd26, 0x25dfdbfa, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x24004050) r7 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r9) sendmsg$IEEE802154_LIST_IFACE(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r10, 0x5, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r11, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000080)={0x44, r12, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x80c1}, 0x4) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x3a, 0x301, 0x270bd24, 0x25dfdbfa, {0x1}}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r7) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r7) sendmsg$NL80211_CMD_ASSOCIATE(r4, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x50, r14, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x4041, 0x3, 0x7, 0x0, {0x7fff, 0x0, 0x0, 0x21, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x400, 0x1, 0x1}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4090}, 0x4011) kernel console output (not intermixed with test programs): 86.899725][ T8188] .?&*&' (ret=-3): failed [ 86.953887][ T8170] usb 41-1: recv xbuf, 0 [ 86.955682][ T24] usb 7-1: string descriptor 0 read error: -71 [ 86.956410][ T7217] vhci_hcd: stop threads [ 86.959681][ T7217] vhci_hcd: release socket [ 86.961731][ T7217] vhci_hcd: disconnect device [ 86.965666][ T24] usb 7-1: USB disconnect, device number 8 [ 87.022240][ T157] vhci_hcd: vhci_device speed not set [ 87.023157][ T8194] binder: 8193:8194 ioctl c0306201 200000000540 returned -22 [ 87.034882][ T843] IPVS: starting estimator thread 0... [ 87.122285][ T8195] IPVS: using max 45 ests per chain, 108000 per kthread [ 87.221722][ T8199] netlink: 20 bytes leftover after parsing attributes in process `syz.1.649'. [ 87.272222][ T843] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 87.422164][ T843] usb 5-1: Using ep0 maxpacket: 8 [ 87.425937][ T843] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 87.429947][ T843] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 87.433249][ T843] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 87.436291][ T843] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 87.440197][ T843] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 87.444776][ T843] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.495307][ T8215] netlink: 16 bytes leftover after parsing attributes in process `syz.1.655'. [ 87.628038][ T8229] trusted_key: encrypted_key: insufficient parameters specified [ 87.650543][ T843] usb 5-1: GET_CAPABILITIES returned 0 [ 87.653504][ T843] usbtmc 5-1:16.0: can't read capabilities [ 87.818143][ T8249] netlink: 8 bytes leftover after parsing attributes in process `syz.2.668'. [ 87.933714][ T8257] trusted_key: syz.3.672 sent an empty control message without MSG_MORE. [ 87.967674][ T40] kauditd_printk_skb: 5005 callbacks suppressed [ 87.967690][ T40] audit: type=1400 audit(1761100224.191:5551): avc: denied { append } for pid=8265 comm="syz.2.676" name="001" dev="devtmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 87.975291][ T8266] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 87.978312][ T8268] netlink: 24 bytes leftover after parsing attributes in process `syz.1.675'. [ 87.980718][ T40] audit: type=1800 audit(1761100224.191:5552): pid=8268 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.675" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 88.018180][ T40] audit: type=1400 audit(1761100224.241:5553): avc: denied { setopt } for pid=8269 comm="syz.2.677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 88.018210][ T8268] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for erspan1 [ 88.103440][ T8278] sg_write: data in/out 10438218/1 bytes for SCSI command 0x6b-- guessing data in; [ 88.103440][ T8278] program syz.2.679 not setting count and/or reply_len properly [ 88.207306][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 88.211758][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 88.215544][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 88.219282][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 88.223014][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 88.228856][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 88.232601][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 88.236304][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 88.240011][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 88.244732][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 88.248676][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 88.252394][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 88.256136][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 88.260242][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 88.261433][ T40] audit: type=1400 audit(1761100224.481:5554): avc: denied { watch } for pid=8193 comm="syz.0.648" path="/123/file0" dev="tmpfs" ino=676 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 88.264140][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 88.264177][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 88.282437][ T40] audit: type=1400 audit(1761100224.511:5555): avc: denied { read } for pid=8276 comm="syz.1.680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 88.348148][ T8290] veth0_macvtap: left allmulticast mode [ 88.350549][ T8290] veth0_macvtap: left promiscuous mode [ 88.740170][ T40] audit: type=1800 audit(1761100224.961:5556): pid=8310 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.691" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 88.763613][ T5994] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 88.785179][ T8310] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for erspan1 [ 88.913365][ T5994] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 88.917033][ T5994] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 88.919738][ T5994] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 88.925242][ T5994] usb 7-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 88.927764][ T5994] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.929952][ T5994] usb 7-1: Product: syz [ 88.931199][ T5994] usb 7-1: Manufacturer: syz [ 88.933286][ T5994] usb 7-1: SerialNumber: syz [ 88.936220][ T5994] usb 7-1: config 0 descriptor?? [ 89.142602][ T5994] adutux 7-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux1 [ 89.345707][ T157] usb 7-1: USB disconnect, device number 9 [ 89.545379][ T8307] usbtmc 5-1:16.0: send_request_dev_dep_msg_in returned -90 [ 89.950430][ T8334] __nla_validate_parse: 6 callbacks suppressed [ 89.950441][ T8334] netlink: 284 bytes leftover after parsing attributes in process `syz.1.707'. [ 90.015326][ T8341] netlink: 24 bytes leftover after parsing attributes in process `syz.1.701'. [ 90.019080][ T8341] netlink: 24 bytes leftover after parsing attributes in process `syz.1.701'. [ 90.032981][ T6018] usb 5-1: USB disconnect, device number 6 [ 90.059291][ T40] audit: type=1400 audit(1761100226.281:5557): avc: denied { listen } for pid=8347 comm="syz.0.703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 90.059582][ T8348] 9pnet_fd: Insufficient options for proto=fd [ 90.071321][ T40] audit: type=1400 audit(1761100226.291:5558): avc: denied { accept } for pid=8347 comm="syz.0.703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 90.136138][ T8358] x_tables: ip6_tables: CT target: only valid in raw table, not syz1 [ 90.190403][ T8362] /dev/sg0: Can't lookup blockdev [ 90.340266][ T8368] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=8368 comm=syz.2.711 [ 90.428581][ T8358] netlink: 4 bytes leftover after parsing attributes in process `syz.1.709'. [ 90.472880][ T8374] netlink: 24 bytes leftover after parsing attributes in process `syz.2.712'. [ 90.479048][ T8370] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 90.515692][ T8380] netlink: 32 bytes leftover after parsing attributes in process `syz.2.713'. [ 90.607179][ T40] audit: type=1400 audit(1761100226.831:5559): avc: denied { create } for pid=8383 comm="syz.2.714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 90.614865][ T40] audit: type=1400 audit(1761100226.831:5560): avc: denied { ioctl } for pid=8383 comm="syz.2.714" path="socket:[19969]" dev="sockfs" ino=19969 ioctlcmd=0x89e4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 90.855911][ T8388] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=28180 sclass=netlink_xfrm_socket pid=8388 comm=syz.2.716 [ 90.944420][ T8394] sch_fq: defrate 0 ignored. [ 90.980706][ T8397] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 90.983737][ T8397] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 91.196260][ T8419] IPVS: persistence engine module ip_vs_pe_s not found [ 91.257481][ T8424] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=770 sclass=netlink_xfrm_socket pid=8424 comm=syz.1.729 [ 91.533721][ T8454] netlink: 8 bytes leftover after parsing attributes in process `syz.1.738'. [ 91.569665][ T8459] kvm: kvm [8455]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x40000005) [ 91.573808][ T8457] kvm: kvm [8455]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x40000005) [ 91.576494][ T8459] netlink: 16 bytes leftover after parsing attributes in process `syz.2.739'. [ 91.580258][ T8462] netlink: 16 bytes leftover after parsing attributes in process `syz.2.739'. [ 92.170377][ T8470] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8470 comm=syz.1.744 [ 92.171466][ T8469] netlink: 24 bytes leftover after parsing attributes in process `syz.2.745'. [ 92.176974][ T8470] geneve4: entered promiscuous mode [ 92.210502][ T8479] xt_hashlimit: size too large, truncated to 1048576 [ 92.452228][ T29] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 92.624854][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 92.628249][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 92.631226][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 92.636467][ T29] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 92.639287][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.641783][ T29] usb 5-1: Product: syz [ 92.643336][ T29] usb 5-1: Manufacturer: syz [ 92.644835][ T29] usb 5-1: SerialNumber: syz [ 92.647450][ T29] usb 5-1: config 0 descriptor?? [ 92.731372][ T8535] gtp0: entered promiscuous mode [ 92.857612][ T29] adutux 5-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 92.873751][ T8557] netlink: 'syz.1.771': attribute type 1 has an invalid length. [ 92.937658][ T8564] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 92.971287][ T8571] 9pnet_virtio: no channels available for device syz [ 92.987945][ T8574] 9pnet_virtio: no channels available for device syz [ 93.067472][ T5994] usb 5-1: USB disconnect, device number 7 [ 93.134990][ T40] kauditd_printk_skb: 68 callbacks suppressed [ 93.135000][ T40] audit: type=1400 audit(1761100229.361:5629): avc: denied { setopt } for pid=8589 comm="syz.2.780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 93.146084][ T8591] openvswitch: netlink: Duplicate or invalid key (type 0). [ 93.148348][ T8591] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 93.264100][ T8472] adutux: No device or device unplugged -19 [ 93.413011][ T8628] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8628 comm=syz.3.793 [ 93.518875][ T40] audit: type=1400 audit(1761100229.741:5630): avc: denied { create } for pid=8653 comm="syz.1.801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 93.528824][ T40] audit: type=1400 audit(1761100229.751:5631): avc: denied { ioctl } for pid=8653 comm="syz.1.801" path="socket:[22824]" dev="sockfs" ino=22824 ioctlcmd=0x943e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 93.624266][ T8666] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 93.631033][ T8666] vlan0: entered promiscuous mode [ 93.636831][ T8666] vlan0: entered allmulticast mode [ 93.638476][ T8666] veth0_vlan: entered allmulticast mode [ 93.640594][ T8666] team0: Port device vlan0 added [ 93.921716][ T40] audit: type=1400 audit(1761100230.141:5632): avc: denied { watch } for pid=8677 comm="syz.0.807" path="/131/file0" dev="tmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 93.929041][ T40] audit: type=1400 audit(1761100230.151:5633): avc: denied { setopt } for pid=8673 comm="syz.1.808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 94.380647][ T8724] binder: 8723:8724 unknown command 0 [ 94.382437][ T8724] binder: 8723:8724 ioctl c0306201 200000000080 returned -22 [ 94.389861][ T8724] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=8724 comm=syz.2.825 [ 94.419177][ T8729] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=8729 comm=syz.2.828 [ 94.429829][ T8729] netlink: 'syz.2.828': attribute type 142 has an invalid length. [ 94.473760][ T8735] mkiss: ax0: crc mode is auto. [ 94.496089][ T40] audit: type=1400 audit(1761100230.721:5634): avc: denied { bind } for pid=8736 comm="syz.0.831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 94.544884][ T40] audit: type=1400 audit(1761100230.771:5635): avc: denied { read write } for pid=8741 comm="syz.2.833" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 94.551974][ T40] audit: type=1400 audit(1761100230.771:5636): avc: denied { open } for pid=8741 comm="syz.2.833" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 94.570285][ T8744] Driver unsupported XDP return value 0 on prog (id 107) dev N/A, expect packet loss! [ 94.956198][ T8768] __nla_validate_parse: 10 callbacks suppressed [ 94.956208][ T8768] netlink: 8 bytes leftover after parsing attributes in process `syz.2.842'. [ 94.960944][ T8768] netlink: 20 bytes leftover after parsing attributes in process `syz.2.842'. [ 94.982474][ T8768] geneve3: entered promiscuous mode [ 94.984682][ T8768] geneve3: entered allmulticast mode [ 95.622142][ T5994] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 95.792138][ T5994] usb 5-1: Using ep0 maxpacket: 32 [ 95.795929][ T5994] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 95.799349][ T5994] usb 5-1: config 0 has no interface number 0 [ 95.803657][ T5994] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 95.806998][ T5994] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.810130][ T5994] usb 5-1: Product: syz [ 95.811683][ T5994] usb 5-1: Manufacturer: syz [ 95.813636][ T5994] usb 5-1: SerialNumber: syz [ 95.816959][ T5994] usb 5-1: config 0 descriptor?? [ 95.820260][ T5994] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 95.823258][ T5994] usb 5-1: selecting invalid altsetting 1 [ 95.825078][ T5994] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 95.831723][ T5994] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 95.835252][ T5994] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 95.837928][ T5994] usb 5-1: media controller created [ 95.847531][ T5994] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 95.922233][ T8794] netlink: 'syz.2.851': attribute type 1 has an invalid length. [ 95.935238][ T8794] bond2: entered promiscuous mode [ 95.937034][ T8794] 8021q: adding VLAN 0 to HW filter on device bond2 [ 95.940347][ T8794] netlink: 'syz.2.851': attribute type 9 has an invalid length. [ 95.946375][ T8794] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8794 comm=syz.2.851 [ 95.950369][ T8795] netlink: 24 bytes leftover after parsing attributes in process `syz.2.851'. [ 95.969511][ T40] audit: type=1326 audit(1761100232.191:5637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8799 comm="syz.3.853" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8c2258efc9 code=0x0 [ 96.002762][ T40] audit: type=1400 audit(1761100232.231:5638): avc: denied { map } for pid=8801 comm="syz.2.854" path="/dev/ubi_ctrl" dev="devtmpfs" ino=718 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 96.067929][ T8806] netlink: 8 bytes leftover after parsing attributes in process `syz.2.855'. [ 96.070668][ T8806] netlink: 12 bytes leftover after parsing attributes in process `syz.2.855'. [ 96.074838][ T8806] netlink: 'syz.2.855': attribute type 19 has an invalid length. [ 96.103023][ T8811] overlayfs: failed to clone upperpath [ 96.108648][ T8811] fuse: Bad value for 'fd' [ 96.255054][ T8826] could not allocate digest TFM handle sha1_mb [ 96.299269][ T8836] netlink: 'syz.2.862': attribute type 1 has an invalid length. [ 96.311514][ T8836] 8021q: adding VLAN 0 to HW filter on device bond3 [ 96.323725][ T8836] bond3: (slave gretap1): making interface the new active one [ 96.327964][ T8836] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 96.332958][ T8836] netlink: 4 bytes leftover after parsing attributes in process `syz.2.862'. [ 96.390284][ T8836] bond3 (unregistering): (slave gretap1): Releasing active interface [ 96.394344][ T8836] bond3 (unregistering): Released all slaves [ 96.618433][ T8854] netlink: 256 bytes leftover after parsing attributes in process `syz.2.867'. [ 96.829393][ T8865] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.872'. [ 96.832387][ T8865] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 96.932342][ T5994] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 96.935406][ T5994] zl10353_read_register: readreg error (reg=127, ret==-110) [ 96.935550][ T8784] usb 5-1: dvb_usb_ce6230: I2C read not implemented [ 96.956599][ T5994] usb 5-1: USB disconnect, device number 8 [ 97.122152][ T157] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 97.128507][ T8881] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 97.131258][ T8880] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 97.131322][ T8881] overlayfs: missing 'lowerdir' [ 97.134200][ T8880] overlayfs: missing 'lowerdir' [ 97.160829][ T8884] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=29 sclass=netlink_tcpdiag_socket pid=8884 comm=syz.1.878 [ 97.276508][ T157] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 97.281447][ T157] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 97.284684][ T157] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 97.287231][ T157] usb 7-1: SerialNumber: syz [ 97.494979][ T8906] fuse: Bad value for 'group_id' [ 97.496634][ T8906] fuse: Bad value for 'group_id' [ 97.524857][ T8915] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.527904][ T8915] batadv_slave_0: entered promiscuous mode [ 97.531910][ T8915] netlink: 28 bytes leftover after parsing attributes in process `syz.1.888'. [ 97.534485][ T8914] netlink: 28 bytes leftover after parsing attributes in process `syz.1.888'. [ 97.607569][ T8930] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8930 comm=syz.0.893 [ 97.651643][ T8937] netlink: 'syz.1.896': attribute type 29 has an invalid length. [ 97.707380][ T8945] xt_SECMARK: invalid mode: 2 [ 98.081552][ T8987] netlink: 'syz.1.911': attribute type 25 has an invalid length. [ 98.335495][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 98.335507][ T40] audit: type=1400 audit(1761100235.556:5652): avc: denied { map } for pid=9013 comm="syz.0.919" path="/proc/405/fd" dev="proc" ino=23948 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 98.366277][ T9020] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 98.376727][ T9020] 9pnet_fd: Insufficient options for proto=fd [ 98.438347][ T40] audit: type=1400 audit(1761100235.656:5653): avc: denied { remove_name } for pid=9018 comm="syz.0.921" name="file0" dev="9p" ino=73924625 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 98.445998][ T40] audit: type=1400 audit(1761100235.656:5654): avc: denied { unlink } for pid=9018 comm="syz.0.921" name="file0" dev="9p" ino=73924625 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 98.494524][ T157] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -71 [ 98.498792][ T157] usb 7-1: USB disconnect, device number 10 [ 98.538058][ T9038] fuse: Unknown parameter 'e' [ 98.577771][ T9044] gfs2: not a GFS2 filesystem [ 98.743049][ T40] audit: type=1400 audit(1761100235.966:5655): avc: denied { accept } for pid=9061 comm="syz.2.935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 98.750610][ T40] audit: type=1400 audit(1761100235.966:5656): avc: denied { create } for pid=9061 comm="syz.2.935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 98.757668][ T40] audit: type=1400 audit(1761100235.966:5657): avc: denied { getopt } for pid=9061 comm="syz.2.935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 98.764086][ T40] audit: type=1400 audit(1761100235.966:5658): avc: denied { read append } for pid=9061 comm="syz.2.935" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 98.771285][ T40] audit: type=1400 audit(1761100235.966:5659): avc: denied { open } for pid=9061 comm="syz.2.935" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 98.778584][ T40] audit: type=1400 audit(1761100235.966:5660): avc: denied { map } for pid=9061 comm="syz.2.935" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 98.785832][ T40] audit: type=1400 audit(1761100235.976:5661): avc: denied { write execute } for pid=9061 comm="syz.2.935" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 98.806124][ T9071] tmpfs: Unknown parameter 'nr_fnodew' [ 98.863256][ T9080] netlink: 'syz.2.940': attribute type 1 has an invalid length. [ 98.876171][ T9080] bond3: entered promiscuous mode [ 98.878047][ T9080] 8021q: adding VLAN 0 to HW filter on device bond3 [ 99.154682][ T9116] 9pnet_virtio: no channels available for device syz [ 99.646332][ T9126] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9126 comm=syz.1.956 [ 99.678842][ T9128] vlan2: entered allmulticast mode [ 99.680516][ T9128] bond0: entered allmulticast mode [ 99.682454][ T9128] bond_slave_0: entered allmulticast mode [ 99.684274][ T9128] bond_slave_1: entered allmulticast mode [ 99.749409][ T9139] Unsupported ieee802154 address type: 0 [ 99.828376][ T9140] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9140 comm=syz.1.960 [ 100.028579][ T9170] QAT: Device 2 not found [ 100.055850][ T9173] 9pnet_fd: Insufficient options for proto=fd [ 100.108740][ T9178] ALSA: seq fatal error: cannot create timer (-19) [ 100.392547][ T5994] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 100.564094][ T5994] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 100.567921][ T5994] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 100.571816][ T5994] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 100.577747][ T5994] usb 7-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 100.581638][ T5994] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.585116][ T5994] usb 7-1: Product: syz [ 100.586907][ T5994] usb 7-1: Manufacturer: syz [ 100.588940][ T5994] usb 7-1: SerialNumber: syz [ 100.593132][ T5994] usb 7-1: config 0 descriptor?? [ 100.798597][ T5994] adutux 7-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 100.810001][ T9200] __nla_validate_parse: 13 callbacks suppressed [ 100.810016][ T9200] netlink: 64 bytes leftover after parsing attributes in process `syz.1.980'. [ 100.839504][ T9202] netlink: 596 bytes leftover after parsing attributes in process `syz.3.981'. [ 100.844102][ T9202] netlink: 4 bytes leftover after parsing attributes in process `syz.3.981'. [ 100.847774][ T9202] veth0_macvtap: left promiscuous mode [ 100.859617][ T9204] netlink: 80 bytes leftover after parsing attributes in process `syz.1.982'. [ 100.866018][ T9204] fuse: Bad value for 'fd' [ 100.940515][ T9211] 9pnet_virtio: no channels available for device syz [ 100.945022][ T9211] netlink: 'syz.1.983': attribute type 1 has an invalid length. [ 100.947553][ T9211] netlink: 1 bytes leftover after parsing attributes in process `syz.1.983'. [ 100.973560][ T5297] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 100.998941][ T5994] usb 7-1: USB disconnect, device number 11 [ 101.089960][ T9230] netlink: 4 bytes leftover after parsing attributes in process `syz.1.987'. [ 101.090391][ T9235] xt_hashlimit: size too large, truncated to 1048576 [ 101.115923][ T9239] netlink: 32 bytes leftover after parsing attributes in process `syz.3.991'. [ 101.202430][ T9181] adutux: No device or device unplugged -19 [ 101.372748][ T9262] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 101.480904][ T9272] overlay: ./file0 is not a directory [ 101.510643][ T9272] 9pnet_virtio: no channels available for device syz [ 101.647859][ T9292] ipt_REJECT: TCP_RESET invalid for non-tcp [ 101.725085][ T9301] SET target dimension over the limit! [ 101.774940][ T9305] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1008'. [ 101.781471][ T9305] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.790538][ T9305] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.819264][ T9308] 9pnet_virtio: no channels available for device syz [ 101.945729][ T9330] random: crng reseeded on system resumption [ 101.988200][ T9330] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1014'. [ 102.125933][ T9343] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2564 sclass=netlink_route_socket pid=9343 comm=syz.0.1016 [ 102.270401][ T9351] overlayfs: cannot append lower layer [ 102.472750][ T9366] overlayfs: failed to clone upperpath [ 102.507884][ T9372] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1028'. [ 102.622230][ T5994] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 102.784883][ T5994] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 102.788027][ T5994] usb 5-1: config 179 has no interface number 0 [ 102.790581][ T5994] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 102.795108][ T5994] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 64 [ 102.799247][ T5994] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 102.803667][ T5994] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 102.807561][ T5994] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 102.814080][ T5994] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 102.817835][ T5994] usb 5-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 102.820676][ T5994] usb 5-1: Product: syz [ 102.825740][ T9362] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 102.830721][ T5994] xpad 5-1:179.65: probe with driver xpad failed with error -5 [ 103.038157][ T6018] usb 5-1: USB disconnect, device number 9 [ 103.261665][ T5297] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 103.296129][ T9408] netlink: 'syz.3.1040': attribute type 5 has an invalid length. [ 103.564086][ T9418] netlink: 'syz.0.1044': attribute type 10 has an invalid length. [ 103.571582][ T9418] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.575351][ T9418] team0: Port device bond0 added [ 103.623141][ T40] kauditd_printk_skb: 19 callbacks suppressed [ 103.623157][ T40] audit: type=1400 audit(1761100240.846:5681): avc: denied { mounton } for pid=9415 comm="syz.2.1043" path="/280/file0" dev="fuse" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 103.635160][ T40] audit: type=1400 audit(1761100240.856:5682): avc: denied { write } for pid=9415 comm="syz.2.1043" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 103.660150][ T9426] SET target dimension over the limit! [ 103.662254][ T9426] netlink: 'syz.0.1046': attribute type 1 has an invalid length. [ 103.666125][ T9426] SET target dimension over the limit! [ 104.251581][ T9444] overlay: Bad value for 'xino' [ 104.283276][ T40] audit: type=1400 audit(1761100241.506:5683): avc: denied { getopt } for pid=9445 comm="syz.3.1052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 104.395909][ T9458] overlayfs: failed to clone upperpath [ 104.399281][ T9458] overlayfs: failed to clone upperpath [ 104.706482][ T9502] fuse: Bad value for 'fd' [ 104.732275][ T9504] bond0: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 104.732328][ T24] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 104.739746][ T9504] bond0 (unregistering): Released all slaves [ 104.785503][ T9514] syz_tun: entered allmulticast mode [ 104.904717][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 104.908074][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 104.911007][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 104.919250][ T24] usb 7-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 104.923175][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.925725][ T24] usb 7-1: Product: syz [ 104.927055][ T24] usb 7-1: Manufacturer: syz [ 104.928552][ T24] usb 7-1: SerialNumber: syz [ 104.933580][ T24] usb 7-1: config 0 descriptor?? [ 105.138257][ T24] adutux 7-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 105.145672][ T9553] nfs4: Bad value for 'source' [ 105.184344][ T40] audit: type=1400 audit(1761100242.406:5684): avc: denied { ioctl } for pid=9554 comm="syz.1.1085" path="socket:[24361]" dev="sockfs" ino=24361 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 105.335025][ T40] audit: type=1326 audit(1761100242.556:5685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9567 comm="syz.1.1088" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdee7b8efc9 code=0x7ffc0000 [ 105.340916][ T5994] usb 7-1: USB disconnect, device number 12 [ 105.348866][ T40] audit: type=1326 audit(1761100242.556:5686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9567 comm="syz.1.1088" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdee7b8efc9 code=0x7ffc0000 [ 105.457897][ T9578] syz_tun: left allmulticast mode [ 105.496032][ T9580] overlayfs: failed to clone upperpath [ 105.500862][ T40] audit: type=1400 audit(1761100242.716:5687): avc: denied { getopt } for pid=9579 comm="syz.1.1092" lport=59962 faddr=::ffff:172.30.0.2 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 105.540828][ T9466] adutux: No device or device unplugged -19 [ 105.632134][ T843] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 105.762124][ T843] usb 5-1: device descriptor read/64, error -71 [ 105.877913][ T9614] __nla_validate_parse: 5 callbacks suppressed [ 105.877924][ T9614] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1099'. [ 105.964823][ T9627] IPVS: sync thread started: state = BACKUP, mcast_ifn = sit0, syncid = 0, id = 0 [ 106.012122][ T843] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 106.016652][ T9635] xt_l2tp: missing protocol rule (udp|l2tpip) [ 106.018874][ T9635] xt_l2tp: missing protocol rule (udp|l2tpip) [ 106.050958][ T40] audit: type=1400 audit(1761100243.266:5688): avc: denied { setopt } for pid=9638 comm="syz.1.1106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 106.147803][ T40] audit: type=1400 audit(1761100243.366:5689): avc: denied { read } for pid=9656 comm="syz.3.1112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 106.149689][ T9660] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1113'. [ 106.157159][ T843] usb 5-1: device descriptor read/64, error -71 [ 106.199697][ T9659] netlink: 'syz.3.1112': attribute type 1 has an invalid length. [ 106.199794][ T9664] netlink: 'syz.3.1112': attribute type 1 has an invalid length. [ 106.251380][ T40] audit: type=1400 audit(1761100243.466:5690): avc: denied { audit_write } for pid=9667 comm="syz.2.1108" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 106.264121][ T843] usb usb5-port1: attempt power cycle [ 106.265372][ T9668] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1108'. [ 106.602181][ T843] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 106.622586][ T843] usb 5-1: device descriptor read/8, error -71 [ 106.862272][ T843] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 106.892549][ T843] usb 5-1: device descriptor read/8, error -71 [ 106.953618][ T9677] overlayfs: upper fs does not support tmpfile. [ 107.004506][ T9684] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1120'. [ 107.014940][ T843] usb usb5-port1: unable to enumerate USB device [ 107.097242][ T9694] netlink: 'syz.1.1123': attribute type 15 has an invalid length. [ 107.099684][ T9694] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1123'. [ 107.102908][ T9694] netlink: 'syz.1.1123': attribute type 1 has an invalid length. [ 107.105350][ T9694] netlink: 'syz.1.1123': attribute type 2 has an invalid length. [ 107.300929][ T9700] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1125'. [ 107.304632][ T9700] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1125'. [ 107.516635][ T9709] 9pnet_virtio: no channels available for device syz [ 107.517108][ T9710] Cannot find add_set index 65532 as target [ 107.642307][ T6018] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 107.693579][ T9718] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1131'. [ 107.794067][ T6018] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 107.797461][ T6018] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 107.800441][ T6018] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 107.806802][ T6018] usb 7-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 107.809629][ T6018] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.812310][ T6018] usb 7-1: Product: syz [ 107.813649][ T6018] usb 7-1: Manufacturer: syz [ 107.815178][ T6018] usb 7-1: SerialNumber: syz [ 107.818300][ T6018] usb 7-1: config 0 descriptor?? [ 108.023856][ T6018] adutux 7-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 108.039692][ T9743] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1138'. [ 108.049706][ T9743] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 108.052547][ T9743] team0: Device ipvlan0 is already an upper device of the team interface [ 108.158013][ T9748] IPVS: set_ctl: invalid protocol: 47 172.20.20.50:20003 [ 108.285170][ T9759] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1144'. [ 108.298910][ T9759] cgroup: Invalid name [ 108.420740][ T9770] cgroup: name respecified [ 109.302605][ T9809] tipc: Enabling of bearer rejected, failed to enable media [ 110.156703][ T9863] tmpfs: Bad value for 'mpol' [ 110.286821][ T157] usb 7-1: USB disconnect, device number 13 [ 110.321652][ T9878] fuse: Bad value for 'fd' [ 110.466975][ T9891] netlink: 'syz.1.1182': attribute type 8 has an invalid length. [ 110.862238][ T9832] comedi comedi0: reset error (fatal) [ 123.402538][ T9911] __nla_validate_parse: 4 callbacks suppressed [ 123.402549][ T9911] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1190'. [ 123.407903][ T9911] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1190'. [ 123.475663][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 123.475673][ T40] audit: type=1400 audit(1761100260.696:5701): avc: denied { map } for pid=9925 comm="syz.2.1193" path="/dev/video7" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 123.476512][ T9926] MTD: Couldn't look up './bus': -15 [ 123.477635][ T40] audit: type=1400 audit(1761100260.696:5702): avc: denied { execute } for pid=9925 comm="syz.2.1193" path="/dev/video7" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 123.497872][ T9926] loop3: detected capacity change from 0 to 7 [ 123.505503][ T9909] Dev loop3: unable to read RDB block 7 [ 123.508327][ T9909] loop3: AHDI p1 [ 123.509837][ T9909] loop3: partition table partially beyond EOD, truncated [ 123.517943][ T9926] Dev loop3: unable to read RDB block 7 [ 123.520273][ T9926] loop3: AHDI p1 [ 123.521662][ T9926] loop3: partition table partially beyond EOD, truncated [ 123.557752][ T9926] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1193'. [ 123.597762][ T9942] netlink: 64535 bytes leftover after parsing attributes in process `syz.2.1197'. [ 123.639545][ T9945] input: syz0 as /devices/virtual/input/input18 [ 123.679499][ T40] audit: type=1400 audit(1761100260.896:5703): avc: denied { setopt } for pid=9946 comm="syz.2.1199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 123.820957][ T9952] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1201'. [ 123.824994][ T9952] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1201'. [ 123.853506][ T9954] 9pnet_fd: Insufficient options for proto=fd [ 123.942334][ T1347] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 123.987810][ T40] audit: type=1400 audit(1761100261.206:5704): avc: denied { setattr } for pid=9963 comm="syz.0.1205" name="ptyq4" dev="devtmpfs" ino=131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 124.041146][ T9972] bond1: Removing last arp target with arp_interval on [ 124.093576][ T1347] usb 7-1: config index 0 descriptor too short (expected 39, got 27) [ 124.096358][ T1347] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 124.099454][ T1347] usb 7-1: config 0 interface 0 has no altsetting 0 [ 124.103505][ T1347] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 124.106453][ T1347] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 124.109152][ T1347] usb 7-1: Product: syz [ 124.110484][ T1347] usb 7-1: Manufacturer: syz [ 124.111969][ T1347] usb 7-1: SerialNumber: syz [ 124.116392][ T1347] usb 7-1: config 0 descriptor?? [ 124.120789][ T1347] hub 7-1:0.0: bad descriptor, ignoring hub [ 124.123613][ T1347] hub 7-1:0.0: probe with driver hub failed with error -5 [ 124.128595][ T1347] usb 7-1: selecting invalid altsetting 0 [ 124.137451][ T9984] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1210'. [ 124.140262][ T9986] netlink: 'syz.3.1209': attribute type 1 has an invalid length. [ 124.140719][ T9984] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1210'. [ 124.154167][ T9986] 8021q: adding VLAN 0 to HW filter on device bond2 [ 124.158299][ T9986] bond2: entered allmulticast mode [ 124.214968][ T40] audit: type=1400 audit(1761100261.436:5705): avc: denied { setattr } for pid=9998 comm="syz.3.1212" name="RAWv6" dev="sockfs" ino=27341 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 124.278347][T10015] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 124.300816][T10017] netlink: 6032 bytes leftover after parsing attributes in process `syz.1.1217'. [ 124.313035][ T40] audit: type=1400 audit(1761100261.536:5706): avc: denied { getopt } for pid=10018 comm="syz.3.1218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 124.323343][ T9947] ptrace attach of "/syz-executor exec"[5935] was attempted by "4mS/|CҼ9]‡'_iߋo➋#\x09md(nThRK3▝A7﷔wc:MA3 \x0c'h1w@nC?mW&I\x0c*\x22e\x0c) vk5'%Y4r(JZC{qKS<6ؒR\x09\x0aLcϭN34 &}#!94^!\x0b8%ZBUkS!!l8xVeXaAaG1O4IDJw42.6`J(qF7ŶJĆ]cţXyHyÝo-=\x0c|\x0d\x07s\x5cɢ\x0d'/.\x0d7DPsLPlY\x0dHpk\x5c,[+?Ƀ7ba̡~ͷV\x0b{+mND_euY%i%?!\x0a_S,!q\x1bMaʟXg F2NcQC\x5c#сՒpB^ƴ\x22, [ 124.341038][T10013] netlink: 'syz.0.1215': attribute type 2 has an invalid length. [ 124.381609][T10013] netlink: 'syz.0.1215': attribute type 1 has an invalid length. [ 124.385379][ T40] audit: type=1400 audit(1761100261.606:5707): avc: denied { mount } for pid=10020 comm="syz.3.1219" name="/" dev="9p" ino=73924623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 124.433397][ T1347] usb 7-1: USB disconnect, device number 14 [ 124.489492][T10025] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1220'. [ 124.760800][T10043] tmpfs: Unknown parameter '' [ 124.919898][T10057] netdevsim netdevsim0 netdevsim3: entered promiscuous mode [ 124.996675][T10061] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10061 comm=syz.2.1234 [ 125.049051][T10069] syz_tun: entered allmulticast mode [ 125.059031][T10069] dvmrp8: entered allmulticast mode [ 125.119045][T10068] syz_tun: left allmulticast mode [ 125.229409][T10093] overlayfs: overlapping lowerdir path [ 125.702504][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 125.706379][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.799264][T10113] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 125.869442][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 125.873054][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.922696][ T40] audit: type=1400 audit(1761100263.146:5708): avc: denied { execute } for pid=10116 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 125.929982][ T40] audit: type=1400 audit(1761100263.146:5709): avc: denied { execute_no_trans } for pid=10116 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 125.938320][ T40] audit: type=1400 audit(1761100263.156:5710): avc: denied { mounton } for pid=10117 comm="syz.0.1251" path="/195/file0" dev="tmpfs" ino=1077 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 125.953983][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 125.957113][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.994482][T10118] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10118 comm=syz.0.1251 [ 126.041409][ T5947] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 126.046290][ T5947] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 126.049041][ T5947] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 126.052015][ T5947] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 126.056746][ T5947] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 126.067087][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 126.070285][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.141137][T10128] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 126.212352][ T13] bridge_slave_1: left allmulticast mode [ 126.214193][ T13] bridge_slave_1: left promiscuous mode [ 126.217066][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.224054][ T13] bridge_slave_0: left allmulticast mode [ 126.226287][ T13] bridge_slave_0: left promiscuous mode [ 126.228694][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.380532][ T13] dvmrp8 (unregistering): left allmulticast mode [ 126.734981][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 126.738928][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 126.742763][ T13] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 126.750370][ T13] bond0 (unregistering): Released all slaves [ 126.810523][ T13] bond1 (unregistering): Released all slaves [ 126.887264][ T13] bond2 (unregistering): Released all slaves [ 126.945782][ T13] bond3 (unregistering): Released all slaves [ 127.042691][T10156] bond7: (slave bond_slave_1): Device is not our slave [ 127.043525][ T13] IPVS: stopping backup sync thread 6495 ... [ 127.045008][T10156] bond7: option active_slave: invalid value (bond_slave_1) [ 127.051219][T10156] bond7 (unregistering): Released all slaves [ 127.079341][T10120] chnl_net:caif_netlink_parms(): no params data found [ 127.183933][T10171] overlayfs: failed to clone upperpath [ 127.184202][T10120] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.188179][T10120] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.190448][T10120] bridge_slave_0: entered allmulticast mode [ 127.193645][T10120] bridge_slave_0: entered promiscuous mode [ 127.200515][T10120] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.203646][T10120] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.206496][T10120] bridge_slave_1: entered allmulticast mode [ 127.209112][T10120] bridge_slave_1: entered promiscuous mode [ 127.258905][T10120] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 127.263917][T10120] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 127.295876][T10120] team0: Port device team_slave_0 added [ 127.299587][T10120] team0: Port device team_slave_1 added [ 127.337407][T10120] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 127.339482][T10120] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 127.347149][T10120] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 127.351507][T10120] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 127.353886][T10120] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 127.361603][T10120] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 127.399957][ T13] hsr_slave_0: left promiscuous mode [ 127.403866][ T13] hsr_slave_1: left promiscuous mode [ 127.406632][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.409763][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.416715][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.419100][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.437115][ T13] veth1_macvtap: left promiscuous mode [ 127.439081][ T13] veth0_macvtap: left promiscuous mode [ 127.440909][ T13] veth1_vlan: left promiscuous mode [ 127.991074][ T13] team0 (unregistering): Port device team_slave_1 removed [ 128.075805][ T13] team0 (unregistering): Port device team_slave_0 removed [ 128.134099][ T5947] Bluetooth: hci2: command tx timeout [ 128.542956][T10120] hsr_slave_0: entered promiscuous mode [ 128.545186][T10120] hsr_slave_1: entered promiscuous mode [ 128.547316][T10120] debugfs: 'hsr0' already exists in 'hsr' [ 128.549030][T10120] Cannot create hsr debugfs directory [ 128.560164][ T40] audit: type=1400 audit(1761100265.776:5711): avc: denied { create } for pid=10188 comm="syz.3.1271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 128.697602][T10120] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 128.701693][T10120] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 128.707030][T10120] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 128.711846][T10120] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 128.759523][T10120] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.766811][T10208] netlink: 'syz.3.1275': attribute type 2 has an invalid length. [ 128.768362][T10120] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.769809][T10208] netlink: 'syz.3.1275': attribute type 1 has an invalid length. [ 128.774679][T10208] netlink: 'syz.3.1275': attribute type 1 has an invalid length. [ 128.777000][ T7223] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.780085][ T7223] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.790791][ T7223] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.793776][ T7223] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.858629][T10217] x_tables: duplicate underflow at hook 1 [ 128.886355][T10224] __nla_validate_parse: 11 callbacks suppressed [ 128.886366][T10224] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1279'. [ 128.894089][T10224] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1279'. [ 128.920902][T10120] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.055025][T10120] veth0_vlan: entered promiscuous mode [ 129.064790][T10120] veth1_vlan: entered promiscuous mode [ 129.079390][T10120] veth0_macvtap: entered promiscuous mode [ 129.086079][T10120] veth1_macvtap: entered promiscuous mode [ 129.097886][T10120] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 129.103785][T10120] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 129.109257][ T7214] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.112003][ T7214] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.117477][ T7214] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.120499][ T7214] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.136882][T10265] batman_adv: batadv0: Adding interface: gretap1 [ 129.138839][T10265] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 129.149424][T10265] batman_adv: batadv0: Interface activated: gretap1 [ 129.182433][ T7223] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.184763][ T7223] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.198930][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.201833][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.209028][ T40] audit: type=1400 audit(1761100266.426:5712): avc: denied { mounton } for pid=10120 comm="syz-executor" path="/syzkaller.swdYb0/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 129.254105][T10270] xt_cgroup: invalid path, errno=-2 [ 129.268876][T10272] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1292'. [ 129.372941][T10279] xt_hashlimit: size too large, truncated to 1048576 [ 129.776917][T10290] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 130.099599][ T40] audit: type=1400 audit(1761100267.316:5713): avc: denied { execute } for pid=10321 comm="syz.0.1304" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 130.106334][T10322] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1304'. [ 130.143774][T10324] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1307'. [ 130.146699][T10324] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1307'. [ 130.176007][T10330] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10330 comm=syz.1.1309 [ 130.202306][ T5947] Bluetooth: hci2: command tx timeout [ 130.238345][ T40] audit: type=1400 audit(1761100267.456:5714): avc: denied { mount } for pid=10334 comm="syz.1.1311" name="/" dev="hugetlbfs" ino=31100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 130.319869][ T40] audit: type=1400 audit(1761100267.536:5715): avc: denied { unmount } for pid=10120 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 130.352225][ T40] audit: type=1400 audit(1761100267.576:5716): avc: denied { getopt } for pid=10350 comm="syz.4.1316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 130.372127][ T5982] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 130.492704][T10363] No control pipe specified [ 130.533382][ T5982] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 130.537590][ T5982] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 130.541018][ T5982] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 130.547180][ T5982] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 130.550079][ T5982] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.552911][ T5982] usb 5-1: Product: syz [ 130.554429][ T5982] usb 5-1: Manufacturer: syz [ 130.555935][ T5982] usb 5-1: SerialNumber: syz [ 130.560579][ T5982] usb 5-1: config 0 descriptor?? [ 130.769451][ T5982] adutux 5-1:0.0: ADU208 now attached to /dev/usb/adutux0 [ 130.777002][ T5982] usb 5-1: USB disconnect, device number 14 [ 130.853568][T10385] fuse: Unknown parameter '0x0000000000000003' [ 130.907529][T10390] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1328'. [ 130.915306][T10394] netlink: 182 bytes leftover after parsing attributes in process `syz.4.1329'. [ 130.917880][ T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 130.921308][ T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 130.942313][ T6004] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 131.066447][T10407] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1333'. [ 131.243724][T10419] loop3: detected capacity change from 0 to 7 [ 131.246841][T10419] Dev loop3: unable to read RDB block 7 [ 131.248972][T10419] loop3: unable to read partition table [ 131.251080][T10419] loop3: partition table beyond EOD, truncated [ 131.254955][T10419] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 131.372924][T10436] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1341'. [ 131.401898][ T40] audit: type=1400 audit(1761100268.616:5717): avc: denied { ioctl } for pid=10435 comm="syz.1.1341" path="socket:[31181]" dev="sockfs" ino=31181 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 131.415231][ T6004] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 131.480013][T10446] tipc: Enabling of bearer rejected, failed to enable media [ 131.484387][ T40] audit: type=1400 audit(1761100268.706:5718): avc: denied { unmount } for pid=5942 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 131.527147][ T40] audit: type=1107 audit(1761100268.746:5719): pid=10445 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 131.532296][T10452] CIFS mount error: No usable UNC path provided in device string! [ 131.532296][T10452] [ 131.565977][ T6004] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 131.569036][T10452] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 131.676149][T10465] dlm: non-version read from control device 0 [ 131.688399][T10457] hsr_slave_1 (unregistering): left promiscuous mode [ 131.717644][T10470] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 131.720053][T10470] IPv6: NLM_F_CREATE should be set when creating new route [ 131.722338][T10470] IPv6: NLM_F_CREATE should be set when creating new route [ 131.724597][T10470] IPv6: NLM_F_CREATE should be set when creating new route [ 131.728162][T10471] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 131.730462][T10470] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 131.733071][T10471] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 131.735494][T10470] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 131.738112][T10471] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 131.740443][T10470] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 131.743106][T10471] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 131.745486][T10470] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 131.748100][T10471] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 131.750510][T10470] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 131.753304][T10471] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 131.753477][T10473] program syz.0.1352 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 131.755758][T10471] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 131.760929][T10470] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 131.763433][T10471] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 131.766086][T10471] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 131.769094][T10471] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 131.771490][T10473] 8021q: VLANs not supported on caif0 [ 131.771563][T10471] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 131.778427][T10470] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 131.781212][T10470] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 131.783908][T10470] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 131.841028][T10485] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=36 sclass=netlink_tcpdiag_socket pid=10485 comm=syz.1.1356 [ 131.950360][ T40] audit: type=1400 audit(1761100269.166:5720): avc: denied { read } for pid=10500 comm="syz.1.1360" path="socket:[31276]" dev="sockfs" ino=31276 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 132.282229][ T5947] Bluetooth: hci2: command tx timeout [ 132.474381][T10510] netlink: 'syz.1.1363': attribute type 1 has an invalid length. [ 132.485610][T10510] bond7: entered promiscuous mode [ 132.487397][T10510] 8021q: adding VLAN 0 to HW filter on device bond7 [ 132.497719][T10510] bond7: (slave bridge4): making interface the new active one [ 132.500022][T10510] bridge4: entered promiscuous mode [ 132.502248][T10510] bond7: (slave bridge4): Enslaving as an active interface with an up link [ 132.532514][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.535264][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.590069][T10513] kvm: pic: non byte write [ 132.619823][T10526] program syz.0.1367 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.624986][T10526] netlink: 'syz.0.1367': attribute type 7 has an invalid length. [ 132.627379][T10526] netlink: 'syz.0.1367': attribute type 8 has an invalid length. [ 132.631941][T10526] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 132.641538][T10526] veth1_to_batadv: entered promiscuous mode [ 132.674598][T10535] netlink: 'syz.3.1370': attribute type 10 has an invalid length. [ 132.687456][ T24] Process accounting resumed [ 132.700346][T10532] Process accounting resumed [ 133.261736][T10591] netlink: 'syz.3.1387': attribute type 2 has an invalid length. [ 133.394519][T10599] "syz.3.1389" (10599) uses obsolete ecb(arc4) skcipher [ 133.425296][ T5947] Bluetooth: hci2: Malformed LE Event: 0x0b [ 133.526863][T10610] netlink: 'syz.4.1393': attribute type 10 has an invalid length. [ 133.529502][T10610] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 133.531782][T10610] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 133.536131][T10610] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 133.734341][T10625] qnx4: no qnx4 filesystem (no root dir). [ 133.988803][T10651] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 134.004321][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 134.004336][ T40] audit: type=1400 audit(1761100271.226:5723): avc: denied { read } for pid=10652 comm="syz.4.1409" name="file0" dev="tmpfs" ino=210 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 134.158659][T10670] netlink: 'syz.3.1416': attribute type 5 has an invalid length. [ 134.245416][T10684] netlink: 'syz.4.1422': attribute type 1 has an invalid length. [ 134.262807][T10684] bond1: entered promiscuous mode [ 134.264651][T10684] 8021q: adding VLAN 0 to HW filter on device bond1 [ 134.268060][T10687] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 134.275418][T10684] 8021q: adding VLAN 0 to HW filter on device bond1 [ 134.277790][T10684] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 134.281153][T10684] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 134.287092][T10684] wireguard: wireguard0: Could not create IPv4 socket [ 134.289428][T10684] bond1: (slave wireguard0): Opening slave failed [ 134.294618][T10692] __nla_validate_parse: 14 callbacks suppressed [ 134.294627][T10692] netlink: 360 bytes leftover after parsing attributes in process `syz.3.1426'. [ 134.295140][T10690] netlink: 'syz.1.1425': attribute type 10 has an invalid length. [ 134.302094][T10690] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1425'. [ 134.305977][T10690] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 134.318504][T10690] batman_adv: batadv0: Removing interface: virt_wifi0 [ 134.365497][ T5947] Bluetooth: hci2: command tx timeout [ 134.477228][T10711] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.479614][T10711] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 134.484609][T10711] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.486930][T10711] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 134.488267][T10708] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1431'. [ 134.525534][T10704] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1430'. [ 134.655188][T10733] F2FS-fs: Conflicting test_dummy_encryption options [ 134.717757][T10736] netlink: 'syz.3.1437': attribute type 3 has an invalid length. [ 134.764869][T10742] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1438'. [ 134.788730][T10746] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 135.002244][ C2] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 135.098668][ T40] audit: type=1400 audit(1761100272.316:5724): avc: denied { bind } for pid=10760 comm="syz.0.1445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 135.105095][ T6284] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 135.278213][ T6284] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 135.281650][ T6284] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 135.285067][ T6284] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 135.290022][ T6284] usb 9-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 135.293155][ T6284] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.295724][ T6284] usb 9-1: Product: syz [ 135.297062][ T6284] usb 9-1: Manufacturer: syz [ 135.297071][ T6284] usb 9-1: SerialNumber: syz [ 135.298628][ T6284] usb 9-1: config 0 descriptor?? [ 135.346346][T10775] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1450'. [ 135.385225][T10785] overlayfs: failed to clone upperpath [ 135.424936][T10792] tmpfs: Bad value for 'mpol' [ 135.506384][ T6284] adutux 9-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 135.708000][ T6284] usb 9-1: USB disconnect, device number 2 [ 135.908101][T10751] adutux: No device or device unplugged -19 [ 135.980256][T10801] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1460'. [ 136.095330][T10813] 9pnet_virtio: no channels available for device syz [ 136.424952][T10849] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3821099475 (7642198950 ns) > initial count (2842047336 ns). Using initial count to start timer. [ 136.519006][ T40] audit: type=1326 audit(1761100273.736:5725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10856 comm="syz.1.1476" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdee7b8efc9 code=0x0 [ 136.570465][T10860] batman_adv: batadv0: Removing interface: team0 [ 136.573451][T10860] team0: Cannot enslave team device to itself [ 136.602254][T10862] Failed to initialize the IGMP autojoin socket (err -2) [ 136.703039][T10862] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1477'. [ 136.725502][T10865] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1478'. [ 136.728420][T10865] ksmbd: Unknown IPC event: 3, ignore. [ 136.916156][T10870] overlayfs: failed to resolve './file0': -2 [ 137.537279][T10893] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 137.595107][T10901] 9pnet_virtio: no channels available for device syz [ 137.595416][ T40] audit: type=1400 audit(1761100274.816:5726): avc: denied { getopt } for pid=10900 comm="syz.3.1490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 137.643268][ T24] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 137.748835][T10922] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1497'. [ 137.788197][T10927] ip6erspan0: entered promiscuous mode [ 137.809637][ T40] audit: type=1400 audit(1761100275.026:5727): avc: denied { view } for pid=10933 comm="syz.4.1500" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 137.823533][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 137.826808][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 137.829651][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 137.837051][ T24] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 137.839802][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.851382][ T24] usb 5-1: Product: syz [ 137.852890][ T24] usb 5-1: Manufacturer: syz [ 137.854540][ T24] usb 5-1: SerialNumber: syz [ 137.860131][T10952] fuse: blksize only supported for fuseblk [ 137.862734][ T24] usb 5-1: config 0 descriptor?? [ 137.925485][T10962] IPv6: Can't replace route, no match found [ 138.051784][T10980] 9pnet_virtio: no channels available for device syz [ 138.054837][T10980] overlay: ./file0 is not a directory [ 138.068460][ T24] adutux 5-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 138.162359][ T40] audit: type=1326 audit(1761100275.386:5728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10999 comm="syz.3.1519" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c2258efc9 code=0x7ffc0000 [ 138.171302][ T40] audit: type=1326 audit(1761100275.386:5729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10999 comm="syz.3.1519" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c2258efc9 code=0x7ffc0000 [ 138.179415][ T40] audit: type=1326 audit(1761100275.386:5730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10999 comm="syz.3.1519" exe="/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7f8c2258efc9 code=0x7ffc0000 [ 138.187787][ T40] audit: type=1326 audit(1761100275.386:5731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10999 comm="syz.3.1519" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c2258efc9 code=0x7ffc0000 [ 138.195118][ T40] audit: type=1326 audit(1761100275.386:5732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10999 comm="syz.3.1519" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c2258efc9 code=0x7ffc0000 [ 138.271367][ T24] usb 5-1: USB disconnect, device number 15 [ 138.322444][T11004] validate_nla: 2 callbacks suppressed [ 138.322455][T11004] netlink: 'syz.1.1520': attribute type 4 has an invalid length. [ 138.327372][T11004] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 138.473956][T10880] adutux: No device or device unplugged -19 [ 138.479739][T11028] overlayfs: failed to clone upperpath [ 138.485404][T11028] overlayfs: failed to clone lowerpath [ 138.622734][T11045] overlayfs: failed to resolve 'verity=require': -2 [ 138.677041][T11052] netlink: 'syz.3.1534': attribute type 2 has an invalid length. [ 138.679456][T11052] netlink: 'syz.3.1534': attribute type 1 has an invalid length. [ 139.298753][T11078] fuse: Bad value for 'rootmode' [ 139.367029][T11081] __nla_validate_parse: 6 callbacks suppressed [ 139.367040][T11081] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1545'. [ 139.371712][T11081] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1545'. [ 139.702245][ T6004] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 139.801845][T11098] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1551'. [ 139.853351][ T6004] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 139.858192][ T6004] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 139.861254][ T6004] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 139.866439][ T6004] usb 9-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 139.870000][ T6004] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.873264][ T6004] usb 9-1: Product: syz [ 139.874593][ T6004] usb 9-1: Manufacturer: syz [ 139.876094][ T6004] usb 9-1: SerialNumber: syz [ 139.879246][ T6004] usb 9-1: config 0 descriptor?? [ 139.921206][ T40] kauditd_printk_skb: 28 callbacks suppressed [ 139.921217][ T40] audit: type=1400 audit(1761100277.136:5761): avc: denied { create } for pid=11106 comm="syz.3.1555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 139.992831][T11113] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1557'. [ 139.995987][T11113] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1557'. [ 139.999022][T11113] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1557'. [ 140.084498][ T6004] adutux 9-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 140.100817][T11121] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1558'. [ 140.264055][T11136] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 140.268216][T11137] trusted_key: encrypted_key: keylen parameter is missing [ 140.268763][T11136] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 140.286085][ T6004] usb 9-1: USB disconnect, device number 3 [ 140.421818][T11149] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11149 comm=syz.3.1565 [ 140.456438][T11151] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1566'. [ 140.485717][T11087] adutux: No device or device unplugged -19 [ 140.492304][ T40] audit: type=1400 audit(1761100277.716:5762): avc: denied { ioctl } for pid=11154 comm="syz.1.1568" path="socket:[33159]" dev="sockfs" ino=33159 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 140.576078][T11160] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 140.619569][T11165] veth1_to_bond: entered allmulticast mode [ 140.622956][T11164] veth1_to_bond: left allmulticast mode [ 140.673998][T11171] tipc: Enabling of bearer rejected, failed to enable media [ 140.677427][T11172] tipc: Enabling of bearer rejected, failed to enable media [ 140.881914][ T40] audit: type=1400 audit(1761100278.096:5763): avc: denied { setopt } for pid=11195 comm="syz.1.1578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 140.906210][T11198] overlayfs: failed to clone lowerpath [ 140.911155][T11198] Failed to initialize the IGMP autojoin socket (err -2) [ 141.010361][T11204] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1581'. [ 141.013316][T11204] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1581'. [ 141.037039][T11208] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 141.037691][T11209] netlink: 'syz.1.1582': attribute type 30 has an invalid length. [ 141.111118][T11216] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 141.115437][T11216] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 141.118128][T11216] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 141.120465][T11216] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 141.151866][ T40] audit: type=1400 audit(1761100278.366:5764): avc: denied { setopt } for pid=11220 comm="syz.4.1587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 141.838537][ T40] audit: type=1400 audit(1761100279.056:5765): avc: denied { getopt } for pid=11229 comm="syz.3.1591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 142.043310][T11250] tmpfs: Unknown parameter 'ol' [ 142.159034][T11263] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 142.227032][T11267] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 142.281655][T11267] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 142.337264][T11267] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 142.342160][ T5982] usb 9-1: new low-speed USB device number 4 using dummy_hcd [ 142.504238][ T5982] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 142.508408][ T5982] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 142.513840][ T5982] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 142.519791][ T5982] usb 9-1: string descriptor 0 read error: -22 [ 142.521773][ T5982] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 142.526028][ T5982] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.530700][T11258] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 142.743157][ T5982] cdc_ncm 9-1:1.0: bind() failure [ 142.747653][ T5982] cdc_ncm 9-1:1.1: CDC Union missing and no IAD found [ 142.749813][ T5982] cdc_ncm 9-1:1.1: bind() failure [ 142.757590][ T5982] usb 9-1: USB disconnect, device number 4 [ 142.769311][T11313] 9pnet_fd: Insufficient options for proto=fd [ 142.807978][T11319] netlink: 'syz.1.1620': attribute type 7 has an invalid length. [ 142.832134][ T6004] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 142.916906][ T40] audit: type=1400 audit(1761100280.136:5766): avc: denied { append } for pid=11328 comm="syz.3.1624" name="file0" dev="tmpfs" ino=2499 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 142.925661][ T40] audit: type=1400 audit(1761100280.136:5767): avc: denied { open } for pid=11328 comm="syz.3.1624" path="/459/file0" dev="tmpfs" ino=2499 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 142.984157][ T6004] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 142.989077][ T6004] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 142.994119][ T6004] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 143.001802][ T6004] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 143.006735][ T6004] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.010137][ T6004] usb 5-1: Product: syz [ 143.011867][ T6004] usb 5-1: Manufacturer: syz [ 143.014213][ T6004] usb 5-1: SerialNumber: syz [ 143.020704][ T6004] usb 5-1: config 0 descriptor?? [ 143.191030][ T40] audit: type=1400 audit(1761100280.406:5768): avc: denied { getopt } for pid=11348 comm="syz.3.1631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 143.199319][ T40] audit: type=1400 audit(1761100280.416:5769): avc: denied { listen } for pid=11348 comm="syz.3.1631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 143.227103][T11351] overlayfs: failed to clone upperpath [ 143.227370][ T6004] adutux 5-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 143.402238][ C2] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 143.428777][ T157] usb 5-1: USB disconnect, device number 16 [ 143.597750][T11378] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3821099475 (7642198950 ns) > initial count (2842047336 ns). Using initial count to start timer. [ 143.630320][T11300] adutux: No device or device unplugged -19 [ 143.657349][ T40] audit: type=1400 audit(1761100280.876:5770): avc: denied { ioctl } for pid=11377 comm="syz.4.1639" path="socket:[34174]" dev="sockfs" ino=34174 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 143.841312][ T5947] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 143.841445][ T5947] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 143.887751][T11416] overlayfs: failed to clone upperpath [ 144.047746][T11436] Failed to initialize the IGMP autojoin socket (err -2) [ 144.300749][T11463] loop4: detected capacity change from 0 to 2560 [ 144.310686][T11463] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 144.314846][T11463] Buffer I/O error on dev loop4, logical block 1, lost async page write [ 144.318731][T11463] Buffer I/O error on dev loop4, logical block 2, lost async page write [ 144.322637][T11463] Buffer I/O error on dev loop4, logical block 3, lost async page write [ 144.325410][T11463] Buffer I/O error on dev loop4, logical block 4, lost async page write [ 144.328191][T11463] Buffer I/O error on dev loop4, logical block 5, lost async page write [ 144.330790][T11463] Buffer I/O error on dev loop4, logical block 6, lost async page write [ 144.334188][T11463] Buffer I/O error on dev loop4, logical block 7, lost async page write [ 144.336826][T11463] Buffer I/O error on dev loop4, logical block 8, lost async page write [ 144.339488][T11463] Buffer I/O error on dev loop4, logical block 9, lost async page write [ 144.466045][T11473] __nla_validate_parse: 5 callbacks suppressed [ 144.466055][T11473] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1666'. [ 144.535897][T11477] usb usb8: usbfs: process 11477 (syz.4.1668) did not claim interface 0 before use [ 144.551262][T11477] 8021q: adding VLAN 0 to HW filter on device bond2 [ 144.567530][T11477] bond2: (slave ip6gretap1): making interface the new active one [ 144.571083][T11484] afs: Unknown parameter 'dy' [ 144.571721][T11477] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 144.578816][T11484] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1670'. [ 144.582316][T11484] configfs: Unknown parameter 'trans' [ 144.584855][T11484] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1670'. [ 144.602254][ T6004] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 144.727098][T11499] tmpfs: Bad value for 'huge' [ 144.755518][ T6004] usb 5-1: config 0 has no interfaces? [ 144.757317][ T6004] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 144.760030][ T6004] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.764299][ T6004] usb 5-1: config 0 descriptor?? [ 145.029679][ T5982] usb 5-1: USB disconnect, device number 17 [ 145.111081][T11526] Failed to initialize the IGMP autojoin socket (err -2) [ 145.154063][T11531] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1686'. [ 145.157691][T11531] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1686'. [ 145.288616][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 145.288631][ T40] audit: type=1400 audit(1761100282.506:5773): avc: denied { write } for pid=11545 comm="syz.4.1689" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 145.346214][ T40] audit: type=1400 audit(1761100282.566:5774): avc: denied { execheap } for pid=11549 comm="syz.3.1691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 145.375610][T11555] Failed to initialize the IGMP autojoin socket (err -2) [ 145.450114][T11559] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1693'. [ 145.549330][T11573] tipc: Enabling of bearer rejected, failed to enable media [ 145.591793][T11570] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1697'. [ 145.624017][T11583] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1699'. [ 145.867655][T11605] tc_dump_action: action bad kind [ 145.869760][T11605] tc_dump_action: action bad kind [ 145.871834][T11605] tc_dump_action: action bad kind [ 145.873709][T11605] tc_dump_action: action bad kind [ 145.875751][T11605] tc_dump_action: action bad kind [ 145.877771][T11605] tc_dump_action: action bad kind [ 145.879470][T11605] tc_dump_action: action bad kind [ 145.881126][T11605] tc_dump_action: action bad kind [ 145.884287][T11605] tc_dump_action: action bad kind [ 145.935997][T11625] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1708'. [ 146.136158][T11656] netlink: 'syz.1.1716': attribute type 58 has an invalid length. [ 146.576452][T11682] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 146.580605][T11682] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 146.585406][T11682] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 146.588578][T11682] overlayfs: conflicting lowerdir path [ 146.650235][T11689] overlayfs: upper fs does not support tmpfile. [ 146.679296][T11694] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1729'. [ 146.738268][T11698] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2074 sclass=netlink_route_socket pid=11698 comm=syz.3.1731 [ 146.781582][ T40] audit: type=1400 audit(1761100283.996:5775): avc: denied { ioctl } for pid=11699 comm="syz.0.1732" path="socket:[35639]" dev="sockfs" ino=35639 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 146.818230][T11712] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 146.827254][ T40] audit: type=1400 audit(1761100284.046:5776): avc: denied { accept } for pid=11713 comm="syz.3.1736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 146.902429][ T40] audit: type=1400 audit(1761100284.126:5777): avc: denied { write } for pid=11722 comm="syz.3.1740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 146.909020][ T40] audit: type=1400 audit(1761100284.126:5778): avc: denied { write } for pid=11722 comm="syz.3.1740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 147.232234][T11754] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=11754 comm=syz.0.1750 [ 147.267112][T11756] nbd: must specify a device to reconfigure [ 147.602161][ T6004] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 147.732470][ T6004] usb 9-1: device descriptor read/64, error -71 [ 147.854870][T11795] overlayfs: failed to clone upperpath [ 147.972282][ T6004] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 148.102148][ T6004] usb 9-1: device descriptor read/64, error -71 [ 148.107449][T11807] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 148.110052][T11807] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 148.212268][ T6004] usb usb9-port1: attempt power cycle [ 148.364080][T11829] 9pnet_fd: Insufficient options for proto=fd [ 148.551575][T11855] netlink: zone id is out of range [ 148.552993][ T6004] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 148.572835][ T6004] usb 9-1: device descriptor read/8, error -71 [ 148.592316][T11858] 8021q: VLANs not supported on sit0 [ 148.634723][T11862] netlink: 'syz.3.1788': attribute type 4 has an invalid length. [ 148.700624][T11871] nfs: Unknown parameter 'noac' [ 148.812153][ T6004] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 148.813010][T11882] bond4: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 148.822005][T11882] bond4 (unregistering): Released all slaves [ 148.832923][ T6004] usb 9-1: device descriptor read/8, error -71 [ 148.945537][ T6004] usb usb9-port1: unable to enumerate USB device [ 148.949904][T11889] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 148.950391][T11890] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 148.982823][ T842] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 149.112199][ T842] usb 5-1: device descriptor read/64, error -71 [ 149.352200][ T842] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 149.482863][ T842] usb 5-1: device descriptor read/64, error -71 [ 149.517826][ T5297] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 149.524582][ T5297] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 149.528292][ T5297] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 149.534096][ T5297] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 149.537648][ T5297] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 149.553044][T11898] Failed to initialize the IGMP autojoin socket (err -2) [ 149.593628][ T842] usb usb5-port1: attempt power cycle [ 149.674328][T11898] chnl_net:caif_netlink_parms(): no params data found [ 149.691528][T11924] overlayfs: conflicting options: userxattr,metacopy=on [ 149.701772][T11924] wireguard: wg0: Could not create IPv4 socket [ 149.837142][T11898] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.839391][T11898] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.842568][T11898] bridge_slave_0: entered allmulticast mode [ 149.846442][T11898] bridge_slave_0: entered promiscuous mode [ 149.852360][T11898] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.855297][T11898] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.858345][T11898] bridge_slave_1: entered allmulticast mode [ 149.866370][T11898] bridge_slave_1: entered promiscuous mode [ 149.948017][T11898] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.959027][T11898] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.967652][ T842] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 149.983422][ T842] usb 5-1: device descriptor read/8, error -71 [ 150.042014][T11898] team0: Port device team_slave_0 added [ 150.062289][T11898] team0: Port device team_slave_1 added [ 150.131888][T11898] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 150.135600][T11898] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 150.144027][T11898] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 150.148763][T11898] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 150.151376][T11898] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 150.161704][T11898] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 150.232375][ T842] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 150.249217][T11898] hsr_slave_0: entered promiscuous mode [ 150.251535][T11898] hsr_slave_1: entered promiscuous mode [ 150.254834][T11898] debugfs: 'hsr0' already exists in 'hsr' [ 150.256639][T11898] Cannot create hsr debugfs directory [ 150.267439][ T842] usb 5-1: device descriptor read/8, error -71 [ 150.387381][ T842] usb usb5-port1: unable to enumerate USB device [ 150.498878][T11898] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.503862][T11898] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 150.548501][T11942] __nla_validate_parse: 6 callbacks suppressed [ 150.548511][T11942] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1812'. [ 150.581665][T11944] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11944 comm=syz.4.1813 [ 150.615054][T11898] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.619378][T11898] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 150.695414][T11898] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.698600][T11898] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 150.907753][T11898] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.911025][T11898] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 151.072198][ T6004] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 151.136873][T11898] netdevsim netdevsim1 netdevsim0: renamed from eth6 [ 151.144298][T11898] netdevsim netdevsim1 netdevsim1: renamed from eth7 [ 151.150761][T11898] netdevsim netdevsim1 netdevsim2: renamed from eth8 [ 151.157595][T11898] netdevsim netdevsim1 netdevsim3: renamed from eth9 [ 151.202288][ T6004] usb 9-1: device descriptor read/64, error -71 [ 151.309188][T11898] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.320688][ T7225] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.323050][ T7225] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.331306][T11960] IPv6: sit1: Disabled Multicast RS [ 151.334033][T11960] sit1: entered allmulticast mode [ 151.358625][ T7223] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.361323][ T7223] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.442174][ T6004] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 151.557975][T11898] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.562344][ T5297] Bluetooth: hci4: command tx timeout [ 151.573751][ T6004] usb 9-1: device descriptor read/64, error -71 [ 151.631082][T11898] veth0_vlan: entered promiscuous mode [ 151.640167][T11898] veth1_vlan: entered promiscuous mode [ 151.646685][T11987] fuse: Bad value for 'group_id' [ 151.648297][T11987] fuse: Bad value for 'group_id' [ 151.682577][ T6004] usb usb9-port1: attempt power cycle [ 151.708655][T11898] veth0_macvtap: entered promiscuous mode [ 151.736971][T11898] veth1_macvtap: entered promiscuous mode [ 151.769255][T11996] sch_tbf: burst 32852 is lower than device lo mtu (65550) ! [ 151.791037][T11898] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.811515][T11898] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.816447][T11898] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 151.826303][T11898] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 151.836103][T11898] wireguard: wg0: Could not create IPv4 socket [ 151.840879][T11898] wireguard: wg1: Could not create IPv4 socket [ 151.841845][ T5297] Bluetooth: hci1: Malformed Event: 0x2f [ 151.845649][T11898] wireguard: wg2: Could not create IPv4 socket [ 152.032253][ T6004] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 152.072894][ T6004] usb 9-1: device descriptor read/8, error -71 [ 152.115575][T12009] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1831'. [ 152.115862][T12017] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1833'. [ 152.149380][T12021] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1834'. [ 152.153302][T12021] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1834'. [ 152.220238][ T40] audit: type=1400 audit(1761100289.436:5779): avc: denied { listen } for pid=12034 comm="syz.0.1839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 152.287255][T12051] netlink: 'syz.3.1844': attribute type 12 has an invalid length. [ 152.289818][T12051] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1844'. [ 152.294810][T12053] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1844'. [ 152.332365][ T6004] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 152.354210][ T6004] usb 9-1: device descriptor read/8, error -71 [ 152.409495][T12060] netlink: 'syz.3.1847': attribute type 10 has an invalid length. [ 152.418576][T12060] team0: Port device dummy0 added [ 152.423420][T12060] netlink: 'syz.3.1847': attribute type 10 has an invalid length. [ 152.427276][T12060] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 152.435925][T12060] team0: Failed to send options change via netlink (err -105) [ 152.438362][T12060] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 152.441300][T12060] team0: Port device dummy0 removed [ 152.472935][ T6004] usb usb9-port1: unable to enumerate USB device [ 152.525147][ T40] audit: type=1400 audit(1761100289.746:5780): avc: denied { watch_sb } for pid=12063 comm="syz.0.1849" path="/283" dev="tmpfs" ino=1534 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 152.659047][T12075] erspan0: entered promiscuous mode [ 152.753271][ T40] audit: type=1400 audit(1761100289.976:5781): avc: denied { read write } for pid=12076 comm="syz.0.1855" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 152.760040][ T40] audit: type=1400 audit(1761100289.976:5782): avc: denied { open } for pid=12076 comm="syz.0.1855" path=2F3238362F66696C65302F66696C6530202864656C6574656429 dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 152.834018][T12078] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 152.838460][T12077] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 153.159016][T12097] Failed to initialize the IGMP autojoin socket (err -2) [ 153.335647][T12119] 9pnet: Could not find request transport: vi [ 153.426990][T12126] fuse: Bad value for 'fd' [ 153.440463][T12127] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1868'. [ 153.490926][T12130] netlink: 'syz.3.1870': attribute type 4 has an invalid length. [ 153.545088][ T40] audit: type=1400 audit(1761100290.766:5783): avc: denied { listen } for pid=12129 comm="syz.0.1869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 153.556895][ T40] audit: type=1800 audit(1761100290.776:5784): pid=12137 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.1872" name="nullb0" dev="tmpfs" ino=1503 res=0 errno=0 [ 153.655929][T12141] netlink: 'syz.3.1873': attribute type 29 has an invalid length. [ 153.658861][T12141] netlink: 'syz.3.1873': attribute type 29 has an invalid length. [ 153.661636][T12141] netlink: 500 bytes leftover after parsing attributes in process `syz.3.1873'. [ 153.698230][T12149] sock: sock_timestamping_bind_phc: sock not bind to device [ 153.701483][T12151] overlayfs: failed to clone upperpath [ 153.709405][T12151] fuse: Bad value for 'fd' [ 153.780207][T12157] fuse: Unknown parameter 'allo' [ 153.894576][T12174] netlink: 'syz.3.1883': attribute type 1 has an invalid length. [ 153.917859][T12174] 8021q: adding VLAN 0 to HW filter on device bond4 [ 154.007772][T12187] tmpfs: Unknown parameter 'nr_inkdes' [ 154.010947][T12189] tmpfs: Unknown parameter 'nr_inkdes' [ 154.025123][T12188] fuse: Bad value for 'fd' [ 154.117393][T12204] netlink: 14864 bytes leftover after parsing attributes in process `syz.3.1893'. [ 154.121314][T12204] openvswitch: netlink: Message has 128 unknown bytes. [ 154.127179][T12204] overlayfs: missing 'lowerdir' [ 154.342356][ T6004] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 154.369471][T12217] netlink: 'syz.3.1898': attribute type 22 has an invalid length. [ 154.391157][T12219] netlink: 'syz.0.1899': attribute type 2 has an invalid length. [ 154.399444][T12219] 9: entered promiscuous mode [ 154.403243][T12219] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12219 comm=syz.0.1899 [ 154.425496][T12217] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=12217 comm=syz.3.1898 [ 154.472252][ T6004] usb 9-1: device descriptor read/64, error -71 [ 154.723103][ T6004] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 154.862234][ T6004] usb 9-1: device descriptor read/64, error -71 [ 154.972226][ T24] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 154.972952][ T6004] usb usb9-port1: attempt power cycle [ 155.077522][ T5947] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 155.081520][ T5947] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 155.085100][ T5947] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 155.088370][ T5947] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 155.091462][ T5947] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 155.107386][T12255] Failed to initialize the IGMP autojoin socket (err -2) [ 155.122811][ T24] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 155.126641][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 155.130224][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 155.135537][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 155.139034][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 155.143250][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 155.147621][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 155.151087][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 155.154717][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 155.158943][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 155.162623][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 155.166326][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 155.170652][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 155.174240][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 155.177848][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 155.181809][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 155.185530][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 155.188725][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 155.193363][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 155.197170][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 155.200634][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 155.204998][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 155.209759][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 155.213427][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 155.217749][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 155.222653][ T24] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 155.225980][ T24] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 155.229202][ T24] usb 5-1: Product: syz [ 155.230950][ T24] usb 5-1: Manufacturer: syz [ 155.233017][ T24] usb 5-1: SerialNumber: syz [ 155.237109][ T24] usb 5-1: config 0 descriptor?? [ 155.245735][ T24] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 155.312159][ T6004] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 155.334094][ T6004] usb 9-1: device descriptor read/8, error -71 [ 155.447237][T12253] ufs: You didn't specify the type of your ufs filesystem [ 155.447237][T12253] [ 155.447237][T12253] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 155.447237][T12253] [ 155.447237][T12253] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 155.457642][T12253] ufs: ufstype=old is supported read-only [ 155.460277][T12253] ufs: ufs_fill_super(): bad magic number [ 155.464550][ T24] usb 5-1: USB disconnect, device number 22 [ 155.469374][ T24] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 155.573920][ T6004] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 155.592981][ T6004] usb 9-1: device descriptor read/8, error -71 [ 155.702328][ T6004] usb usb9-port1: unable to enumerate USB device [ 156.107252][T12284] No source specified [ 156.107749][T12285] No source specified [ 156.402506][T12314] __nla_validate_parse: 9 callbacks suppressed [ 156.402516][T12314] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1923'. [ 156.428857][T12316] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1924'. [ 156.493641][T12317] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1924'. [ 156.510257][T12317] bond5: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 156.517864][T12317] bond5 (unregistering): Released all slaves [ 156.624673][T12320] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=12320 comm=syz.3.1925 [ 156.777168][T12337] IPv6: NLM_F_CREATE should be specified when creating new route [ 156.794299][T12330] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1928'. [ 156.851212][T12342] syzkaller0: entered promiscuous mode [ 156.853076][T12342] syzkaller0: entered allmulticast mode [ 156.952612][T12357] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1935'. [ 156.992253][T12367] futex_wake_op: syz.0.1937 tries to shift op by -1; fix this program [ 157.118968][ T40] audit: type=1400 audit(1761100294.336:5785): avc: denied { ioctl } for pid=12365 comm="syz.0.1937" path="/dev/fb0" dev="devtmpfs" ino=637 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 157.142358][ T0] NOHZ tick-stop error: local softirq work is pending, handler #280!!! [ 157.164340][ T5297] Bluetooth: hci0: command tx timeout [ 157.165781][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 157.168803][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 157.173243][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 157.261493][T12255] netdevsim netdevsim1 netdevsim0: renamed from eth6 [ 157.277288][T12255] netdevsim netdevsim1 netdevsim1: renamed from eth7 [ 157.285377][T12255] netdevsim netdevsim1 netdevsim2: renamed from eth8 [ 157.290602][T12255] netdevsim netdevsim1 netdevsim3: renamed from eth9 [ 157.321661][T12392] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1943'. [ 157.448655][T12255] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 157.454980][T12255] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 157.460861][T12255] wireguard: wg0: Could not create IPv4 socket [ 157.465176][T12255] wireguard: wg1: Could not create IPv4 socket [ 157.468249][T12255] wireguard: wg2: Could not create IPv4 socket [ 157.742204][ T24] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 157.747878][T12424] overlayfs: failed to resolve './file0': -2 [ 157.763558][ T842] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 157.799042][T12429] wireguard: wg0: Could not create IPv4 socket [ 157.840296][T12431] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1958'. [ 157.843190][T12431] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1958'. [ 157.848971][T12431] geneve4: entered promiscuous mode [ 157.850643][T12431] geneve4: entered allmulticast mode [ 157.874672][ T40] audit: type=1326 audit(1761100295.096:5786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12432 comm="syz.3.1959" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8c2258efc9 code=0x0 [ 157.902252][ T842] usb 9-1: device descriptor read/64, error -71 [ 157.902410][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 157.908599][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.912962][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 157.917196][ T24] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 157.920829][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.927452][ T24] usb 5-1: config 0 descriptor?? [ 158.132748][T12389] netlink: 'syz.0.1942': attribute type 10 has an invalid length. [ 158.138745][ T24] usbhid 5-1:0.0: can't add hid device: -71 [ 158.140718][ T24] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 158.145085][ T24] usb 5-1: USB disconnect, device number 23 [ 158.153064][ T842] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 158.292312][ T842] usb 9-1: device descriptor read/64, error -71 [ 158.412544][ T842] usb usb9-port1: attempt power cycle [ 158.681023][T12445] netlink: 'syz.0.1963': attribute type 4 has an invalid length. [ 158.739732][T12447] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1964'. [ 158.752380][ T842] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 158.774469][ T842] usb 9-1: device descriptor read/8, error -71 [ 159.011378][T12472] program syz.0.1971 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 159.022212][ T842] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 159.042616][ T842] usb 9-1: device descriptor read/8, error -71 [ 159.044786][ T40] audit: type=1804 audit(1761100296.266:5787): pid=12474 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.1973" name="file0" dev="tmpfs" ino=3505 res=1 errno=0 [ 159.052720][ T1127] sr 2:0:0:0: [sr0] tag#13 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 159.056053][ T1127] sr 2:0:0:0: [sr0] tag#13 Sense Key : Illegal Request [current] [ 159.059061][ T1127] sr 2:0:0:0: [sr0] tag#13 Add. Sense: Invalid command operation code [ 159.062354][ T1127] sr 2:0:0:0: [sr0] tag#13 CDB: Write(10) 2a 00 00 00 00 00 00 00 02 00 [ 159.065134][ T1127] critical target error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 159.068326][ T1127] buffer_io_error: 310 callbacks suppressed [ 159.068333][ T1127] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 159.153096][ T842] usb usb9-port1: unable to enumerate USB device [ 159.226952][T12490] overlayfs: failed to clone upperpath [ 159.381968][T12499] netlink: 'syz.3.1981': attribute type 11 has an invalid length. [ 159.384624][T12499] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1981'. [ 159.402329][ C2] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 159.499940][ T40] audit: type=1400 audit(1761100296.716:5788): avc: denied { watch watch_reads } for pid=12502 comm="syz.0.1983" path="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 159.642140][ T5297] Bluetooth: hci1: command 0x0419 tx timeout [ 159.802271][ T843] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 159.972116][ T843] usb 5-1: Using ep0 maxpacket: 8 [ 159.975799][ T843] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 159.979113][ T843] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 159.983197][ T843] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 159.987458][ T843] usb 5-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 159.992453][ T843] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 159.995351][ T843] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.002754][ T843] usbtmc 5-1:16.0: bulk endpoints not found [ 160.185236][ T40] audit: type=1400 audit(1761100297.406:5789): avc: denied { lock } for pid=12512 comm="syz.3.1986" path="socket:[39271]" dev="sockfs" ino=39271 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 160.267973][T12517] Failed to initialize the IGMP autojoin socket (err -2) [ 160.381538][ T10] usb 5-1: USB disconnect, device number 24 [ 160.615732][T12520] sch_fq: defrate 4294967292 ignored. [ 161.094998][T12537] team0: Port device vlan1 added [ 161.099935][T12537] netlink: 'syz.0.1994': attribute type 10 has an invalid length. [ 161.114797][T12537] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 161.209223][ T40] audit: type=1400 audit(1761100298.426:5790): avc: denied { read } for pid=12549 comm="syz.3.1998" path="socket:[39328]" dev="sockfs" ino=39328 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 161.392168][ T843] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 161.522263][ T843] usb 5-1: device descriptor read/64, error -71 [ 161.762151][ T843] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 161.892028][T12555] SELinux: failed to load policy [ 161.902249][ T843] usb 5-1: device descriptor read/64, error -71 [ 162.020132][ T40] audit: type=1400 audit(1761100299.236:5791): avc: denied { listen } for pid=12561 comm="syz.4.2003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 162.022515][ T843] usb usb5-port1: attempt power cycle [ 162.026463][ T40] audit: type=1400 audit(1761100299.236:5792): avc: denied { accept } for pid=12561 comm="syz.4.2003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 162.201262][T12590] netlink: 124 bytes leftover after parsing attributes in process `syz.4.2012'. [ 162.255188][ T40] audit: type=1400 audit(1761100299.476:5793): avc: denied { read } for pid=12593 comm="syz.3.2014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 162.382257][ T843] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 162.403108][ T843] usb 5-1: device descriptor read/8, error -71 [ 162.642282][ T843] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 162.662593][ T843] usb 5-1: device descriptor read/8, error -71 [ 162.733727][ T5947] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 162.736711][ T5947] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 162.739962][ T5947] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 162.743776][ T5947] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 162.746471][ T5947] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 162.758012][T12602] Failed to initialize the IGMP autojoin socket (err -2) [ 162.772321][ T843] usb usb5-port1: unable to enumerate USB device [ 162.907622][T12613] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2019'. [ 163.111048][T12642] sp0: Synchronizing with TNC [ 163.211566][T12602] netdevsim netdevsim1 netdevsim0: renamed from eth6 [ 163.217712][T12602] netdevsim netdevsim1 netdevsim1: renamed from eth7 [ 163.225151][T12602] netdevsim netdevsim1 netdevsim2: renamed from eth8 [ 163.231568][T12602] netdevsim netdevsim1 netdevsim3: renamed from eth9 [ 163.261692][T12652] overlayfs: failed to clone upperpath [ 163.279896][ T40] audit: type=1400 audit(1761100300.496:5794): avc: denied { setopt } for pid=12654 comm="syz.4.2031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 163.417497][T12602] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 163.425078][T12602] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 163.432354][T12602] wireguard: wg0: Could not create IPv4 socket [ 163.435460][T12602] wireguard: wg1: Could not create IPv4 socket [ 163.438430][T12602] wireguard: wg2: Could not create IPv4 socket [ 163.584242][T12671] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 163.596573][T12671] kvm: pic: non byte read [ 163.599287][T12671] kvm: pic: single mode not supported [ 163.599421][T12671] kvm: pic: level sensitive irq not supported [ 163.601776][T12671] kvm: pic: non byte read [ 163.607252][T12671] kvm: pic: single mode not supported [ 163.607581][T12671] kvm: pic: non byte read [ 163.613640][T12671] kvm: pic: single mode not supported [ 163.613654][T12671] kvm: pic: level sensitive irq not supported [ 163.616422][T12671] kvm: pic: non byte read [ 163.623304][T12671] kvm: pic: non byte read [ 163.627135][T12671] kvm: pic: non byte read [ 163.630845][T12671] kvm: pic: non byte read [ 163.635227][T12671] kvm: pic: non byte read [ 163.644914][T12671] kvm: pic: single mode not supported [ 163.644927][T12671] kvm: pic: level sensitive irq not supported [ 163.683997][T12671] overlay: Bad value for 'workdir' [ 163.825081][T12680] random: crng reseeded on system resumption [ 164.351032][T12710] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2047'. [ 164.375004][T12704] /dev/sr0: Can't open blockdev [ 164.631166][T12725] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2052'. [ 164.642278][ T157] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 164.772149][ T157] usb 5-1: device descriptor read/64, error -71 [ 165.022177][ T157] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 165.152155][ T157] usb 5-1: device descriptor read/64, error -71 [ 165.219385][T12730] xt_hashlimit: invalid rate [ 165.262524][ T157] usb usb5-port1: attempt power cycle [ 165.418638][T12732] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2055'. [ 165.418650][ T40] audit: type=1400 audit(1761100302.636:5795): avc: denied { nlmsg_read } for pid=12731 comm="syz.3.2055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 165.612886][ T157] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 165.642552][ T157] usb 5-1: device descriptor read/8, error -71 [ 165.903048][ T157] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 165.922800][ T157] usb 5-1: device descriptor read/8, error -71 [ 166.024388][T12784] netlink: 'syz.4.2069': attribute type 19 has an invalid length. [ 166.032699][ T157] usb usb5-port1: unable to enumerate USB device [ 166.154222][ T40] audit: type=1400 audit(1761100303.376:5796): avc: denied { mounton } for pid=12789 comm="syz.4.2071" path="/132/file0" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 166.160834][T12790] overlayfs: failed to resolve 'obj_user=': -2 [ 166.164853][ T40] audit: type=1400 audit(1761100303.386:5797): avc: denied { remount } for pid=12789 comm="syz.4.2071" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 166.217924][T12792] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=12792 comm=syz.4.2072 [ 166.685688][T12807] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 166.886356][T12825] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 166.889145][T12825] overlayfs: failed to set xattr on upper [ 166.890947][T12825] overlayfs: ...falling back to redirect_dir=nofollow. [ 166.894400][T12825] overlayfs: ...falling back to index=off. [ 166.896303][T12825] overlayfs: ...falling back to uuid=null. [ 166.898121][T12825] overlayfs: ...falling back to xino=off. [ 167.226399][T12844] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 167.230413][T12844] VFS: Can't find a romfs filesystem on dev nullb0. [ 167.230413][T12844] [ 167.272423][T12846] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2092'. [ 167.289372][T12846] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 167.294243][T12846] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 167.299045][T12846] bond0 (unregistering): Released all slaves [ 167.326407][T12847] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2092'. [ 167.329299][T12847] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2092'. [ 167.464111][T12856] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2094'. [ 167.576527][T12866] tipc: Can't bind to reserved service type 2 [ 167.780849][T12889] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2101'. [ 167.843113][ T6004] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 167.994027][ T6004] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 167.997725][ T6004] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 168.004256][ T6004] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 168.007728][ T6004] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 168.011318][ T6004] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 168.016536][ T6004] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 168.020404][ T6004] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 168.024115][ T6004] usb 5-1: Product: syz [ 168.025558][ T6004] usb 5-1: Manufacturer: syz [ 168.032626][ T6004] cdc_wdm 5-1:1.0: skipping garbage [ 168.034295][ T6004] cdc_wdm 5-1:1.0: skipping garbage [ 168.036903][ T6004] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 168.038755][ T6004] cdc_wdm 5-1:1.0: Unknown control protocol [ 168.073264][T12906] cgroup: Name too long [ 168.133375][T12910] Invalid source name [ 168.135197][T12910] UBIFS error (pid: 12910): cannot open "/dev/md0", error -22 [ 168.233730][ T40] audit: type=1400 audit(1761100305.456:5798): avc: denied { read write } for pid=12862 comm="syz.0.2096" name="cdc-wdm0" dev="devtmpfs" ino=3090 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 168.238630][ T5982] usb 5-1: USB disconnect, device number 33 [ 168.244290][ T40] audit: type=1400 audit(1761100305.456:5799): avc: denied { open } for pid=12862 comm="syz.0.2096" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3090 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 168.313380][T12918] xt_hashlimit: invalid rate [ 168.347880][T12920] 8021q: adding VLAN 0 to HW filter on device bond5 [ 168.435301][ T5297] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 168.439114][ T5297] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 168.443297][ T5297] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 168.446800][ T5297] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 168.450149][ T5297] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 168.479735][T12931] ------------[ cut here ]------------ [ 168.481707][T12931] WARNING: CPU: 0 PID: 12931 at net/mac80211/rate.c:53 rate_control_rate_init+0x5c0/0x720 [ 168.485628][T12931] Modules linked in: [ 168.487036][T12931] CPU: 0 UID: 0 PID: 12931 Comm: syz.3.2116 Not tainted syzkaller #0 PREEMPT(full) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 168.491229][T12931] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 168.494966][T12931] RIP: 0010:rate_control_rate_init+0x5c0/0x720 [ 168.496921][T12931] Code: 48 8d 35 00 00 00 00 e8 fe 90 c2 f6 e8 89 b9 cc f6 e9 25 fe ff ff e8 9f b7 e6 f6 90 0f 0b 90 e9 17 fe ff ff e8 91 b7 e6 f6 90 <0f> 0b 90 eb b1 e8 86 b7 e6 f6 e8 e1 84 cb f6 31 ff 89 c3 89 c6 e8 [ 168.503096][T12931] RSP: 0018:ffffc90003f37208 EFLAGS: 00010283 [ 168.505001][T12931] RAX: 0000000000000737 RBX: ffff88802fbfc000 RCX: ffffc90007913000 [ 168.507463][T12931] RDX: 0000000000080000 RSI: ffffffff8ad652bf RDI: 0000000000000005 [ 168.509906][T12931] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 168.512780][T12931] R10: 0000000000000001 R11: 0000000000000001 R12: ffff888032fc2c80 [ 168.515237][T12931] R13: ffff888056338e80 R14: ffff888044664000 R15: 0000000000000000 [ 168.517639][T12931] FS: 00007f8c234006c0(0000) GS:ffff8880d6a0b000(0000) knlGS:0000000000000000 [ 168.520421][T12931] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 168.522760][T12931] CR2: 00007f8c23317d60 CR3: 000000004f923000 CR4: 0000000000352ef0 [ 168.525529][T12931] Call Trace: [ 168.526567][T12931] [ 168.527514][T12931] rate_control_rate_init_all_links+0x76/0x1e0 [ 168.529636][T12931] sta_apply_auth_flags.constprop.0+0x4bb/0x510 [ 168.531751][T12931] sta_apply_parameters+0xca8/0x1930 [ 168.533673][T12931] ieee80211_add_station+0x3fa/0x6c0 [ 168.535430][T12931] nl80211_new_station+0x1502/0x1c90 [ 168.537093][T12931] ? __pfx_nl80211_new_station+0x10/0x10 [ 168.538853][T12931] ? nl80211_pre_doit+0x1b0/0xb10 [ 168.540461][T12931] genl_family_rcv_msg_doit+0x209/0x2f0 [ 168.542256][T12931] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 168.544176][T12931] ? bpf_lsm_capable+0x9/0x10 [ 168.545676][T12931] ? security_capable+0x7e/0x260 [ 168.547215][T12931] ? ns_capable+0xd7/0x110 [ 168.548628][T12931] genl_rcv_msg+0x55c/0x800 [ 168.550053][T12931] ? __pfx_genl_rcv_msg+0x10/0x10 [ 168.551659][T12931] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 168.553415][T12931] ? __pfx_nl80211_new_station+0x10/0x10 [ 168.555196][T12931] ? __pfx_nl80211_post_doit+0x10/0x10 [ 168.556898][T12931] netlink_rcv_skb+0x158/0x420 [ 168.558409][T12931] ? __pfx_genl_rcv_msg+0x10/0x10 [ 168.560011][T12931] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 168.561783][T12931] ? netlink_deliver_tap+0x1ae/0xd30 [ 168.563588][T12931] genl_rcv+0x28/0x40 [ 168.564868][T12931] netlink_unicast+0x5aa/0x870 [ 168.566386][T12931] ? __pfx_netlink_unicast+0x10/0x10 [ 168.567952][T12931] netlink_sendmsg+0x8c8/0xdd0 [ 168.569276][T12931] ? __pfx_netlink_sendmsg+0x10/0x10 [ 168.570741][T12931] ____sys_sendmsg+0xa98/0xc70 [ 168.572261][T12931] ? copy_msghdr_from_user+0x10a/0x160 [ 168.574009][T12931] ? __pfx_____sys_sendmsg+0x10/0x10 [ 168.575778][T12931] ___sys_sendmsg+0x134/0x1d0 [ 168.577260][T12931] ? futex_private_hash_put+0x176/0x300 [ 168.578986][T12931] ? __pfx____sys_sendmsg+0x10/0x10 [ 168.580625][T12931] ? __lock_acquire+0x622/0x1c90 [ 168.582261][T12931] __sys_sendmsg+0x16d/0x220 [ 168.583713][T12931] ? __pfx___sys_sendmsg+0x10/0x10 [ 168.585337][T12931] ? __x64_sys_futex+0x1e0/0x4c0 [ 168.587034][T12931] do_syscall_64+0xcd/0xfa0 [ 168.588470][T12931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.590309][T12931] RIP: 0033:0x7f8c2258efc9 [ 168.591818][T12931] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.597801][T12931] RSP: 002b:00007f8c23400038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 168.600393][T12931] RAX: ffffffffffffffda RBX: 00007f8c227e5fa0 RCX: 00007f8c2258efc9 [ 168.602897][T12931] RDX: 0000000000000004 RSI: 0000200000001080 RDI: 0000000000000009 [ 168.605364][T12931] RBP: 00007f8c22611f91 R08: 0000000000000000 R09: 0000000000000000 [ 168.607809][T12931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 168.610249][T12931] R13: 00007f8c227e6038 R14: 00007f8c227e5fa0 R15: 00007ffcaba3bfe8 [ 168.612769][T12931] [ 168.613757][T12931] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 168.616034][T12931] CPU: 0 UID: 0 PID: 12931 Comm: syz.3.2116 Not tainted syzkaller #0 PREEMPT(full) [ 168.618892][T12931] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 168.622230][T12931] Call Trace: [ 168.623294][T12931] [ 168.624232][T12931] dump_stack_lvl+0x3d/0x1f0 [ 168.625716][T12931] vpanic+0x640/0x6f0 [ 168.626978][T12931] ? rate_control_rate_init+0x5c0/0x720 [ 168.628717][T12931] panic+0xca/0xd0 [ 168.629911][T12931] ? __pfx_panic+0x10/0x10 [ 168.631337][T12931] check_panic_on_warn+0xab/0xb0 [ 168.632896][T12931] __warn+0xf6/0x3c0 [ 168.634133][T12931] ? rate_control_rate_init+0x5c0/0x720 [ 168.635900][T12931] report_bug+0x3c3/0x580 [ 168.637250][T12931] ? rate_control_rate_init+0x5c0/0x720 [ 168.638963][T12931] handle_bug+0x184/0x210 [ 168.640341][T12931] exc_invalid_op+0x17/0x50 [ 168.641773][T12931] asm_exc_invalid_op+0x1a/0x20 [ 168.643343][T12931] RIP: 0010:rate_control_rate_init+0x5c0/0x720 [ 168.645273][T12931] Code: 48 8d 35 00 00 00 00 e8 fe 90 c2 f6 e8 89 b9 cc f6 e9 25 fe ff ff e8 9f b7 e6 f6 90 0f 0b 90 e9 17 fe ff ff e8 91 b7 e6 f6 90 <0f> 0b 90 eb b1 e8 86 b7 e6 f6 e8 e1 84 cb f6 31 ff 89 c3 89 c6 e8 [ 168.651167][T12931] RSP: 0018:ffffc90003f37208 EFLAGS: 00010283 [ 168.653150][T12931] RAX: 0000000000000737 RBX: ffff88802fbfc000 RCX: ffffc90007913000 [ 168.655641][T12931] RDX: 0000000000080000 RSI: ffffffff8ad652bf RDI: 0000000000000005 [ 168.658079][T12931] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 168.660545][T12931] R10: 0000000000000001 R11: 0000000000000001 R12: ffff888032fc2c80 [ 168.662989][T12931] R13: ffff888056338e80 R14: ffff888044664000 R15: 0000000000000000 [ 168.665498][T12931] ? rate_control_rate_init+0x5bf/0x720 [ 168.667235][T12931] ? rate_control_rate_init+0x5bf/0x720 [ 168.668939][T12931] rate_control_rate_init_all_links+0x76/0x1e0 [ 168.670876][T12931] sta_apply_auth_flags.constprop.0+0x4bb/0x510 [ 168.672821][T12931] sta_apply_parameters+0xca8/0x1930 [ 168.674497][T12931] ieee80211_add_station+0x3fa/0x6c0 [ 168.676158][T12931] nl80211_new_station+0x1502/0x1c90 [ 168.677813][T12931] ? __pfx_nl80211_new_station+0x10/0x10 [ 168.679584][T12931] ? nl80211_pre_doit+0x1b0/0xb10 [ 168.681177][T12931] genl_family_rcv_msg_doit+0x209/0x2f0 [ 168.682907][T12931] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 168.684840][T12931] ? bpf_lsm_capable+0x9/0x10 [ 168.686318][T12931] ? security_capable+0x7e/0x260 [ 168.687864][T12931] ? ns_capable+0xd7/0x110 [ 168.689266][T12931] genl_rcv_msg+0x55c/0x800 [ 168.690684][T12931] ? __pfx_genl_rcv_msg+0x10/0x10 [ 168.692267][T12931] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 168.693942][T12931] ? __pfx_nl80211_new_station+0x10/0x10 [ 168.695698][T12931] ? __pfx_nl80211_post_doit+0x10/0x10 [ 168.697404][T12931] netlink_rcv_skb+0x158/0x420 [ 168.698907][T12931] ? __pfx_genl_rcv_msg+0x10/0x10 [ 168.700497][T12931] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 168.702153][T12931] ? netlink_deliver_tap+0x1ae/0xd30 [ 168.703817][T12931] genl_rcv+0x28/0x40 [ 168.705083][T12931] netlink_unicast+0x5aa/0x870 [ 168.706590][T12931] ? __pfx_netlink_unicast+0x10/0x10 [ 168.708263][T12931] netlink_sendmsg+0x8c8/0xdd0 [ 168.709769][T12931] ? __pfx_netlink_sendmsg+0x10/0x10 [ 168.711436][T12931] ____sys_sendmsg+0xa98/0xc70 [ 168.712946][T12931] ? copy_msghdr_from_user+0x10a/0x160 [ 168.714657][T12931] ? __pfx_____sys_sendmsg+0x10/0x10 [ 168.716325][T12931] ___sys_sendmsg+0x134/0x1d0 [ 168.717798][T12931] ? futex_private_hash_put+0x176/0x300 [ 168.719540][T12931] ? __pfx____sys_sendmsg+0x10/0x10 [ 168.721180][T12931] ? __lock_acquire+0x622/0x1c90 [ 168.722757][T12931] __sys_sendmsg+0x16d/0x220 [ 168.724227][T12931] ? __pfx___sys_sendmsg+0x10/0x10 [ 168.725831][T12931] ? __x64_sys_futex+0x1e0/0x4c0 [ 168.727398][T12931] do_syscall_64+0xcd/0xfa0 [ 168.728836][T12931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.730681][T12931] RIP: 0033:0x7f8c2258efc9 [ 168.732100][T12931] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.737919][T12931] RSP: 002b:00007f8c23400038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 168.740507][T12931] RAX: ffffffffffffffda RBX: 00007f8c227e5fa0 RCX: 00007f8c2258efc9 [ 168.742937][T12931] RDX: 0000000000000004 RSI: 0000200000001080 RDI: 0000000000000009 [ 168.745406][T12931] RBP: 00007f8c22611f91 R08: 0000000000000000 R09: 0000000000000000 [ 168.747847][T12931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 168.750229][T12931] R13: 00007f8c227e6038 R14: 00007f8c227e5fa0 R15: 00007ffcaba3bfe8 [ 168.752689][T12931] [ 168.754187][T12931] Kernel Offset: disabled [ 168.755543][T12931] Rebooting in 86400 seconds.. VM DIAGNOSIS: 02:31:36 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000031 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85294565 RDI=ffffffff9add5700 RBP=ffffffff9add56c0 RSP=ffffc90003f36b70 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000031 R14=ffffffff9add56c0 R15=ffffffff85294500 RIP=ffffffff8529458f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f8c234006c0 ffffffff 00c00000 GS =0000 ffff8880d6a0b000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f8c23317d60 CR3=000000004f923000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000ffffff80 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000010000 0000000000030000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8c22612fdb ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8c22612fe8 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8c22612fe2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8c22612ff6 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8c2261307c ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8c2261315a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8c227b74a8 00007f8c227b74a0 00007f8c227b7498 00007f8c227b7470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4d4552555341454d 5f434c00454e4f48 50454c45545f434c 0053534552444441 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5f434c00454d414e 5f434c0052455041 505f434c00534547 415353454d5f434c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000001 RBX=ffffffff8e3c4460 RCX=0000000000000002 RDX=0000000000000000 RSI=ffffffff82313680 RDI=ffffffff8e3c4460 RBP=0000000000000002 RSP=ffffc9000166f6d8 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff82256d50 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6b0b000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fee07317d60 CR3=000000002af7e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fee067b76c3 00007fee067b76c3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc42b74bc0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555574ab09a8 0000555574ab0290 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555574a97498 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555574aa3f1f 0000555574aa3a50 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555574a9c094 0000555574a9c090 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100040cbe080001 0000020806060111 e212020006030e02 0004031a02000203 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4602000003000400 00080001800401c7 100008024998006d 6f7264632f766564 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f01ffffffffffff ffffe90801800300 1000068004038004 0210000100000008 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 060a0106da636f6c 6c615f61645f6f74 756101ffffffffff ffffffe508068003 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0300000000000031 72656c6c616b7a79 7301ffffffffffff ffffdf0806800304 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000017dded RBX=0000000000000002 RCX=ffffffff8b6042a9 RDX=0000000000000000 RSI=ffffffff8da2a184 RDI=ffffffff8bf06d40 RBP=ffffed1003bd6920 RSP=ffffc90000187de8 R8 =0000000000000001 R9 =ffffed100d4c6655 R10=ffff88806a6332ab R11=0000000000000001 R12=0000000000000002 R13=ffff88801deb4900 R14=ffffffff9081f4d0 R15=0000000000000000 RIP=ffffffff8b602d5f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6c0b000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f20f8915000 CR3=000000004ef44000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000004090001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fca05e12fdb ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fca05e12fe8 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fca05e12fe2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fca05e12ff6 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fca05e1307c ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fca05e1315a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 732064616200786c 6c36313025783000 657a697320780004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5605414447005d49 49131415005d1500 405f4c56055d404d 5751560541444700 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000006cf7f44d RBX=0000000000000004 RCX=00000000048746cd RDX=00000000332f2790 RSI=00000000b7fa2012 RDI=000000004c8d26bb RBP=ffff888047be8000 RSP=ffffc900057d6f38 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=ffff888047be8b30 R13=ffff888047be8bd0 R14=00000000dc8fa3a6 R15=0000000000000001 RIP=ffffffff8198cb92 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555559dcf500 ffffffff 00c00000 GS =0000 ffff8880d6d0b000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00005555717b8808 CR3=000000004f552000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000001 Opmask01=0000000000000001 Opmask02=0000000000030000 Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe88347dbb 00007ffe88347dbb ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe883482c0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe883482c0 0000003000000018 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 657078656e75203a 30696368203a6874 6f6f7465756c4220 5d37393235542000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6570726564752030 3063636220306274 6565746575664220 5737333235542000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 61722033353a632e 657461722f313132 303863616d2f7465 6e20746120313339 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 657020656c69665f 7268633d7373616c 637420745f656369 7665645f6d65646f ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 313d657669737369 6d72657020656c69 665f7268633d7373 616c637420745f65 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 63697665645f6d65 646f6d3a725f7463 656a626f3a755f6d 65747379733d7478 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65746e6f63742074 5f6d64617379733a 725f6d6461737973 3a746f6f723d7478 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65746e6f63732030 3930333d6f6e6920 227366706d747665 64223d7665642022 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000